CVE-2023-48010

Summary

CVE-2023-48010 is a new vulnerability affecting STMicroelectronics SPC58 PowerPC microcontrollers. This issue involves a missing protection mechanism for alternate hardware interfaces, allowing code running as Supervisor to bypass the System Memory Protection Unit. Consequently, attackers can gain unlimited read/write access to protected assets. This vulnerability poses a significant risk, particularly in industrial control systems and other applications where access to sensitive data is crucial. Organizations using STMicroelectronics SPC58 PowerPC microcontrollers are strongly urged to apply the forthcoming patch to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.