CVE-2020-20949

Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924)

published January 20, 2021

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00938 · 60.5th percentile
Published
2021-01-20T15:42Z
EPSS history
Timeline
  • 20 JAN 15:42Z
    Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924)
    cvelistv5