Lucene search

SilabsCVE-2023-3487

HistoryOct 20, 2023 - 3:15 p.m.

CVE-2023-3487

2023-10-2015:15:11

CWE-787

CWE-190

CWE-125

Silabs

web.nvd.nist.gov

cve-2023-3487

integer overflow

memory access

silicon labs

gecko bootloader

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

Affected configurations

Nvd

Node

silabsgecko_bootloaderRange≤4.3.1

VendorProductVersionCPE
silabsgecko_bootloader*cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silabs	gecko_bootloader	*	cpe:2.3:a:silabs:gecko_bootloader::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GSDK",
    "vendor": "silabs.com",
    "versions": [
      {
        "lessThanOrEqual": "4.3.1",
        "status": "affected",
        "version": "1.0",
        "versionType": "patch"
      }
    ]
  }
]

References

community.silabs.com/s/contentdocument/0698Y00000ZmXqLQAV

github.com/SiliconLabs/gecko_sdk/releases

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-3487