CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected…

published September 12, 2018

CVSS
—
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00400 · 32.8th percentile
Published
2018-09-12T15:00Z
EPSS history
Timeline
  • 12 SEP 15:00Z
    Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected…
    cvelistv5