Vulnerability in Trustedfirmware Trusted Firmware-M
CVE-2023-40271
In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.004 (31.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Trustedfirmware Trusted Firmware-M — versions 1.6.0, 1.6.1, 1.7.0
Weakness classification (CWE)
References
- tf-m-user-guide.trustedfirmware.org/releases/index.html (Release Notes)
- git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security… (Technical Description, Exploit, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-40271?
- CVE-2023-40271 is a high-severity vulnerability in Trustedfirmware Trusted Firmware-M, classified under Incorrect Comparison. CVSS score: 7.5/10. Published 2023-09-08.
- How severe is CVE-2023-40271?
- High severity. CVSS v3 base score is 7.5 out of 10.