Lucene search
HistorySep 05, 2024 - 4:15 p.m.
CVE-2023-51712
trusted firmware-m
logging subsystem
argument verification
sensitive data
login function
CVSS3
4.7
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
20.8%
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.
Affected configurations
Node
armtrusted_firmware-mRange≤2.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arm | trusted_firmware-m | * | cpe:2.3:a:arm:trusted_firmware-m:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-51712
2024-09-05 00:00:00
cve
cve
CVE-2023-51712
2024-09-05 16:15:06
vulnrichment
vulnrichment
CVE-2023-51712
2024-09-05 00:00:00
debiancve
debiancve
CVE-2023-51712
2024-09-05 16:15:06
osv
osv
CVE-2023-51712
2024-09-05 16:15:06
CVSS3
4.7
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS
0.001
Percentile
20.8%
Related for NVD:CVE-2023-51712