What’s Vulnerable › Vulnerabilities

CVE-2025-9709: NRF52810 Runtime EM Fault Injection APPROTECT Bypass

• Severity: high (CVSS 8.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-05 · updated 2026-06-17
• Weakness: CWE-1191

Description

On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the hardware system possible.

Affected products

• Nordic Semiconductor nRF52810: 0

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-27211
• https://raelize.com/upload/research/2022/No_Hat_2022_-_Glitching_devices_for_code_execution_v1.1.pdf
• https://raelize.com/upload/research/2025/Dartmouth_202505_False-Injections-Tales-of-Physics-Misconceptions-and-Weird-Machines_v1.1.pdf
• https://www.toreon.com/cve-2025-9709-major-vulnerability-in-common-chip/

Get alerted when CVE-2025-9709 or the next vulnerability affects your stack