Lucene search

K
cveMitreCVE-2021-43327
HistoryDec 02, 2021 - 8:15 p.m.

CVE-2021-43327

2021-12-0220:15:07
mitre
web.nvd.nist.gov
22
4
cve-2021-43327
renesas
rx65
rx65n
vcc glitch
security id key
firmware extraction
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

39.3%

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted.

Affected configurations

Nvd
Node
renesasrx65n_firmwareMatch-
AND
renesasrx65nMatch-
Node
renesasrx65_firmwareMatch-
AND
renesasrx65Match-
VendorProductVersionCPE
renesasrx65n_firmware-cpe:2.3:o:renesas:rx65n_firmware:-:*:*:*:*:*:*:*
renesasrx65n-cpe:2.3:h:renesas:rx65n:-:*:*:*:*:*:*:*
renesasrx65_firmware-cpe:2.3:o:renesas:rx65_firmware:-:*:*:*:*:*:*:*
renesasrx65-cpe:2.3:h:renesas:rx65:-:*:*:*:*:*:*:*

Social References

More

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

39.3%

Related for CVE-2021-43327