by Kastro
Paper/Archive/CVE-2022-24936

CVE-2022-24936

silabs.com Gecko Bootloader — Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices

EPSS 0.9%public exploitCVSS 9.1
critical.is priorityof 100
50
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 60.8.608 × 2012.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade.

Affected

ProductAffectedFixed inSource
Gecko Bootloader≤ 4.0.1–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Silabs (CNA)8.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

advisorycommunity.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000Gdop4QAB?operationContext=S1patchgithub.com/SiliconLabs/gecko_sdk/blame/2e82050dc8823c9fe0e8908c1b2666fb83056230/platform/bootloader/core/btl_bootload.c