{"id":"CVE-2023-4041","state":"PUBLISHED","title":"Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability","description":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects \"Standalone\" and \"Application\" versions of Gecko Bootloader.","publishedAt":"2023-08-23T04:09:12.180Z","updatedAt":"2024-10-03T14:08:22.261Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"Silabs"},"assigner":"Silabs","products":["Silicon Labs Gecko Bootloader"],"affected":[{"vendor":"Silicon Labs","product":"Gecko Bootloader","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"4.3.1","versionType":"4.3.1"},{"version":"0","status":"affected","lessThan":"4.2.4","versionType":"4.2.4"},{"version":"4.3.2","status":"unaffected"},{"version":"4.2.4","status":"unaffected"}],"modules":["Firmware Update File Parser"],"platforms":["ARM"],"repo":"https://github.com/SiliconLabs/gecko_sdk/releases"}],"references":["https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000XT8GsQAL?operationContext=S1"],"weaknesses":["CWE-120","CWE-787","CWE-913"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/4xxx/CVE-2023-4041.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-4041","state":"PUBLISHED","datePublished":"2023-08-23T04:09:12.180Z","dateUpdated":"2024-10-03T14:08:22.261Z","assignerShortName":"Silabs","assignerOrgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateReserved":"2023-08-01T13:45:33.620Z"},"containers":{"cna":{"title":"Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability","descriptions":[{"lang":"en","value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects \"Standalone\" and \"Application\" versions of Gecko Bootloader."}],"affected":[{"vendor":"Silicon Labs","product":"Gecko Bootloader","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"4.3.1","versionType":"4.3.1"},{"version":"0","status":"affected","lessThan":"4.2.4","versionType":"4.2.4"},{"version":"4.3.2","status":"unaffected"},{"version":"4.2.4","status":"unaffected"}],"modules":["Firmware Update File Parser"],"platforms":["ARM"],"repo":"https://github.com/SiliconLabs/gecko_sdk/releases"}],"references":[{"url":"https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000XT8GsQAL?operationContext=S1"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-913","description":"CWE-913 Improper Control of Dynamically-Managed Code Resources","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Silabs","orgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateUpdated":"2024-09-25T16:19:31.647Z"},"impacts":[{"capecId":"CAPEC-242","descriptions":[{"lang":"en","value":"CAPEC-242 Code Injection"}]},{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000XT8GsQAL?operationContext=S1","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T07:17:11.849Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"silabs","product":"gecko_bootloader","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"4.3.1","versionType":"custom"},{"version":"0","status":"affected","lessThan":"4.3.2","versionType":"custom"},{"version":"4.3.2","status":"unaffected"},{"version":"4.2.4","status":"unaffected"}],"cpes":["cpe:2.3:a:silabs:gecko_bootloader:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-03T13:51:29.426747Z","id":"CVE-2023-4041","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-03T14:08:22.261Z"}}]}}}