CVE-2024-2502CWE-754

Failure to update the tamper reset cause register when a tamper event occurs

Low · published August 29, 2024

CVSS v3.1
2.0
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected.

This is possible because the TAMPERRSTCAUSE register may not be properly updated when a level 4 tamper event (a tamper reset) occurs. This impacts Series 2 HSE-SVH devices, including xG23B, xG24B, xG25B, and xG28B, but does not impact xG21B. To mitigate this issue, upgrade to SE Firmware version 2.2.6 or later.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2024-08-29T22:06Z
EPSS history
Timeline
  • 29 AUG 22:06Z
    Failure to update the tamper reset cause register when a tamper event occurs
    cvelistv5