CVE-2024-25077

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices

Critical · published July 10, 2024

CVSS v3.1
9.8
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

🔥 A rogue Nonce could let attackers take the wheel! The Renesas SmartBond devices have a vulnerability that allows for the modification of a crucial value used in secure boot verification! Think of it like a restaurant where the chef doesn’t check the ingredients before cooking. If someone swaps out a spice for a harmful one without the chef noticing, the meal could be sabotaged—just like modifying the Nonce modifies the execution of code without detection. An attacker could exploit this vulnerability to execute arbitrary code on the device, potentially leading to full control. This means they could manipulate device functions, steal sensitive information, or even turn the device into a tool for further attacks—absolutely devastating for security!

Put simply

Think of it like a restaurant where the chef doesn’t check the ingredients before cooking. If someone swaps out a spice for a harmful one without the chef noticing, the meal could be sabotaged—just like modifying the Nonce modifies the execution of code without detection. This vulnerability in Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices stems from the Nonce for flash image decryption being stored in an unsigned header. This allows attackers to alter its value, leading to unauthorized code execution due to the AES encryption in CTR mode lacking proper authentication.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the device, potentially leading to full control. This means they could manipulate device functions, steal sensitive information, or even turn the device into a tool for further attacks—absolutely devastating for security! Immediately patch your devices to the latest available firmware version that addresses this vulnerability. Review your security policies for these devices and ensure that device integrity checks are enforced. Consider implementing additional security measures to monitor and safeguard your systems. You've got this! By taking action now, you'll ensure your devices are secure and minimize the risks. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Published
2024-07-10T00:00Z
EPSS history
Timeline
  • 10 JUL 00:00Z
    An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices
    cvelistv5