CVE-2023-4041
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A vulnerability in the Silicon Labs Gecko Bootloader on ARM allows code injection and authentication bypass due to a buffer overflow and out-of-bounds write issue. This affects both 'Standalone' and 'Application' versions of the bootloader.
Risk Assessment
This vulnerability could lead to unauthorized access to systems and potential injection of malicious code, posing a serious security risk to the organization.
Recommendation
It is recommended to update the bootloader to the latest version that addresses this vulnerability and to implement additional security measures.
Original NVD description (English source)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.