CVE-2017-18347

2022-10-0316:23:14

mitre

www.cve.org

access control

rdp level 1

stmicroelectronics stm32f0

physically present attackers

firmware extraction

serial wire debug

race condition

swd commands.

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device’s protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.