CVE record · CVE-2024-4760

Voltage glitch during startup of the EEFC NVM controller can bypass the security bit

CVSS 6.3 MediumEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Microchip) at 16 May 2024, 13:07 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Microchip	SAME70	affected 0 Other versions: affected
Microchip	SAMS70	affected 0 Other versions: affected
Microchip	SAMV70	affected 0 Other versions: affected
Microchip	SAMV71	affected 0 Other versions: affected
Microchip	SAMG55	affected 0 Other versions: unaffected
Microchip	SAM4C	affected 0 Other versions: unaffected
Microchip	SAM4S	affected 0 Other versions: unaffected
Microchip	SAM4N	affected 0 Other versions: unaffected
Microchip	SAM4E	affected 0 Other versions: unaffected
Microchip	SAM3S	affected 0 Other versions: unaffected
Microchip	SAM3N	affected 0 Other versions: unaffected
Microchip	SAM3U	affected 0 Other versions: unaffected

Identifiers: CVE-2024-4760
CNA: Microchip
Weakness (CWE): CWE-1247
Tags: Microchip SAME70
Microchip SAMS70
Microchip SAMV70
Microchip SAMV71
Microchip SAMG55
Microchip SAM4C
Microchip SAM4S
Microchip SAM4N
CWE-1247
Published: 16 May 2024
Updated: 6 Jun 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
6.3	Medium	3.1	CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	CNA (Microchip)

CISA KEV Not listed.
EPSS 0.0021, the 11th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 May 2024. New records show when each source confirmed them.

Sources

References from the CNA

ww1.microchip.com/downloads/aemDocuments/documents/MCU32/ProductDocuments/SupportingCollateral/Security-Advisory-CVE-2024-4760.pdf vendor-advisory
www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/ technical-descriptionexploit

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.