This vulnerability involves an incorrect check of a function return value in the Caliptra Core Runtime Firmware's ActivateFirmwareCmd::activate_fw module. It allows bypassing the verification of the MCU firmware during a hitless update process. Affected versions include 2.0.0, 2.0.1, and 2.1.0. The CVSS 4.0 vector indicates the attack requires adjacent network access, low attack complexity, partial privileges, no user interaction, and results in high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published yet.

An attacker with high privileges and adjacent network access can bypass the MCU firmware verification during hitless updates, potentially allowing unauthorized or malicious firmware to be installed. This undermines the firmware integrity and security of the device, posing risks to confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the update mechanism to trusted administrators and monitor for unusual firmware update activity. Follow vendor communications for updates on patches or official mitigations.