CVE-2020-11684

2020-09-1413:32:01

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader).