CVE-2024-2502 - Failure to update the tamper reset cause register when a tamper event occurs

Back Back to CVE browser

LOW

Failure to update the tamper reset cause register when a tamper event occurs

Published Aug 29, 2024

2.0

LOW

CVSS 3.1

EPSS 0.17%

Description

An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected.

This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event (a tamper reset) occurs. This impacts Series 2 HSE-SVH devices, including xG23B, xG24B, xG25B, and xG28B, but does not impact xG21B. To mitigate this issue, upgrade to SE Firmware version 2.2.6 or later.

Affected products

Vendor Silabs.com Product SE Firmware Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=2.2.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Silabs.com

SE Firmware

unaffected

Version	Status	Constraints
0	affected	<=2.2.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-754

References (2)

https://community.silabs.com/sfc/servlet.shepherd/document/download/069Vm00000BYb5HIAT?operationContext=S1
vendor-advisorypermissions-required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27451
Advisory

Link	Providers	Tags
https://community.silabs.com/sfc/servlet.shepherd/document/download/069Vm00000BYb5HIAT?operationContext=S1		vendor-advisorypermissions-required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27451		Advisory