Lucene search

[email protected]CVE-2020-13463

HistoryAug 31, 2020 - 4:15 p.m.

CVE-2020-13463

2020-08-3116:15:14

CWE-755

[email protected]

web.nvd.nist.gov

cve-2020-13463

flash memory

readout protection

apex microelectronics

apm32f103

firmware extraction

debug interface

exception handling

physical attack

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.

Affected configurations

NVD

Node

apexmicapm32f103_firmwareMatch-

AND

apexmicapm32f103Match-

CPENameOperatorVersion
apexmic:apm32f103_firmwareapexmic apm32f103 firmwareeq-

CPE	Name	Operator	Version
apexmic:apm32f103_firmware	apexmic apm32f103 firmware	eq	-

References

www.usenix.org/system/files/woot20-paper-obermaier.pdf

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

Related for CVE-2020-13463

cvelist1 prion1 nvd1