CVE-2024-4760 - CVE House
Back to Database
Status published Medium CVE-2024-4760

Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

Vulnerability Description

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-4760

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Waleed Alzamil
  • Bandar Alharbi
  • Meshari Alhammadi

References

More from Microchip

View All →
CVE-2025-9497
Hardcoded Upgrade Decryption Passwords
Medium 5.5
CVE-2025-47904
Unsigned upgrade package
Medium 5.7
CVE-2025-47902
SQL Injection in web resource
High 7.1
CVE-2025-47901
RCE on restore configuration password
High 8.9
CVE-2025-47900
RCE on backup configuration password
High 8.9

Affected Vendor

Affected Software

SAME70, SAMS70, SAMV70, SAMV71, SAMG55, SAM4C, SAM4S, SAM4N, SAM4E, SAM3S, SAM3N, SAM3U
Vulnerable Versions:
0

Timeline

Official Publish: May 16th, 2024
Last Modified: June 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1247

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.