STM32F1
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-14236 | Cri | 0.64 | 9.8 | 0.02 | Sep 12, 2019 | On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution. | ||
| CVE-2020-8004 | Hig | 0.49 | 7.5 | 0.03 | Apr 6, 2020 | STMicroelectronics STM32F1 devices have Incorrect Access Control. | ||
| CVE-2020-13466 | Med | 0.44 | 6.8 | 0.00 | Aug 31, 2020 | STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration. | ||
| CVE-2019-14238 | Med | 0.43 | 6.6 | 0.00 | Sep 24, 2019 | On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus. | ||
| CVE-2017-18347 | Med | 0.30 | 4.6 | 0.00 | Sep 12, 2018 | Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full… |
- risk 0.64cvss 9.8epss 0.02
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.
- risk 0.49cvss 7.5epss 0.03
STMicroelectronics STM32F1 devices have Incorrect Access Control.
- risk 0.44cvss 6.8epss 0.00
STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
- risk 0.43cvss 6.6epss 0.00
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus.
- risk 0.30cvss 4.6epss 0.00
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full…