CVE-2023-4280
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-4280 is a vulnerability affecting Silicon Labs TrustZone implementation in version 4.3.x and earlier of the Gecko SDK. An unvalidated input in this system enables an attacker to gain unauthorized access to the trusted region of memory from the untrusted region. This issue poses a significant security risk, allowing unauthorized modification or extraction of sensitive data. Attackers can exploit this vulnerability through specially crafted input, potentially leading to serious consequences. Silicon Labs strongly advises users to update to a patched version of the Gecko SDK as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.