Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

published 2024-05-16 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-44357

cvss: 6.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 11%
public exploits: 0; none known

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-05-24)

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

0x01team.com https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.3	CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Microchip SAME70
Microchip SAMS70
Microchip SAMV70
Microchip SAMV71
Microchip SAMG55
Microchip SAM4C
Microchip SAM4S
Microchip SAM4N
Microchip SAM4E
Microchip SAM3S
Microchip SAM3N
Microchip SAM3U
amtel same70
amtel sams70
amtel samv70
amtel samv71

Classification

Weakness

CWE-1247 Improper Protection Against Voltage and Clock Glitches

References

0x01team.com /hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/
technical-description, exploit
ww1.microchip.com /downloads/aemDocuments/documents/MCU32/ProductDocuments/SupportingCollateral/Security-Advisory-CVE-2024-4760.
vendor-advisory

Sources

CVE List CVE-2024-4760
NVD CVE-2024-4760

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary