Trusted Firmware-M up to 1.8.0 CryptoCell PSA Driver software Interface improper authentication

Summaryinfo

A vulnerability was found in Trusted Firmware-M up to 1.8.0. It has been rated as critical. Impacted is an unknown function of the component CryptoCell PSA Driver software Interface. Performing a manipulation results in improper authentication. This vulnerability is identified as CVE-2023-40271. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical has been found in Trusted Firmware-M up to 1.8.0 (Firmware Software). This affects an unknown function of the component CryptoCell PSA Driver software Interface. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8.

The weakness was released 09/08/2023. It is possible to read the advisory at tf-m-user-guide.trustedfirmware.org. This vulnerability is uniquely identified as CVE-2023-40271 since 08/11/2023. The technical details are unknown and an exploit is not publicly available.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at tf-m-user-guide.trustedfirmware.org.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-44867). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firmware Software

Vendor

• Trusted

Name

• Firmware-M

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion