Medium severity6.8NVD Advisory· Published Sep 14, 2020· Updated Jun 17, 2026

CVE-2020-11683

Description

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux4sam/At91bootstrap
cpe:2.3:a:linux4sam:at91bootstrap:*:*:*:*:*:*:*:*
Range: >=3.7.2,<3.9.2
Microchip/AT91bootstrapdescription
Microchip/AT91bootstrapllm-fuzzy
Range: <3.9.2

Patches

Vulnerability mechanics

References

github.com/linux4sam/at91bootstrap/commit/7753914c9a622c245f3a3cf2af5e24b6a9904213nvdPatchThird Party Advisory
labs.f-secure.com/advisories/microchip-at91bootstrap/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000