CVE-2024-4760

Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

State: Published
Severity: 6.3 Medium
Published: May 16, 2024
Updated: Jun 6, 2025
Reserved: May 10, 2024

Description

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	Microchip

Weaknesses

CWE-1247 Improper Protection Against Voltage and Clock Glitches

Affected Products

Product	Versions
SAME70Microchip	0Affected
SAMS70Microchip	0Affected
SAMV70Microchip	0Affected
SAMV71Microchip	0Affected
SAMG55Microchip	0Affected
SAM4CMicrochip	0Affected
SAM4SMicrochip	0Affected
SAM4NMicrochip	0Affected
SAM4EMicrochip	0Affected
SAM3SMicrochip	0Affected
SAM3NMicrochip	0Affected
SAM3UMicrochip	0Affected

References

https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/technical-descriptionexploit
https://ww1.microchip.com/downloads/aemDocuments/documents/MCU32/ProductDocuments/SupportingCollateral/Security-Advisory-CVE-2024-4760.pdfvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.