Description
On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the hardware system possible.
Problem types
CWE-1191: On-Chip Debug and Test Interface With Improper Access Control
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
Runtime Hardware Protection Bypass
Product status
Any version
Credits
Milena Mangiola
References
raelize.com/...Glitching_devices_for_code_execution_v1.1.pdf
raelize.com/...cs-Misconceptions-and-Weird-Machines_v1.1.pdf
nvd.nist.gov/vuln/detail/CVE-2020-27211
www.toreon.com/...5-9709-major-vulnerability-in-common-chip/