Lucene search
+L

9983 matches found

CVE
CVE
•added 2020/08/31 3:28 p.m.•49 views

CVE-2020-13468

CVE-2020-13468 affects Gigadevice GD32F130 devices. Affected component is the device’s inter-IC bonding wires where fault injection can bypass physical protections, enabling a local attacker with access to escalate debug interface permissions. The root cause is insufficient physical protection of...

6.8CVSS6.8AI score0.00548EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/31 3:28 p.m.•44 views

CVE-2020-13468

Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...

6.9AI score0.00548EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/31 3:26 p.m.•60 views

CVE-2020-13467

The CVE-2020-13467 entry concerns China Key Systems & Integrated Circuit CKS32F103 devices where the flash memory readout protection can be bypassed, allowing physical attackers to extract firmware via the debug interface and exception handling. The vulnerability is described in the NVD entry as ...

4.6CVSS4.6AI score0.00297EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/31 3:26 p.m.•39 views

CVE-2020-13467

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.7AI score0.00297EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/08/31 3:23 p.m.•37 views

CVE-2020-13465

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

6.9AI score0.00538EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/31 3:23 p.m.•53 views

CVE-2020-13465

The CVE-2020-13465 entry concerns Gigadevice GD32F103 devices. The connected CNVD-2020-52332 description confirms a code execution vulnerability that can be exploited by a physically-accessible attacker to submit a special request, redirect control flow, and execute arbitrary code via the debug i...

6.8CVSS6.9AI score0.00538EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/08/31 3:22 p.m.•66 views

CVE-2020-13464

CVE-2020-13464 affects China Key Systems & Integrated Circuit CKS32F103 devices. The vulnerability is in the flash memory readout protection, allowing a physical attacker to extract firmware through the debug interface by leveraging the CPU or DMA module. Impact stated in sources is firmware disc...

4.2CVSS4.5AI score0.00234EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/31 3:22 p.m.•53 views

CVE-2020-13464

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

4.4AI score0.00234EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/31 3:21 p.m.•53 views

CVE-2020-13463

CVE-2020-13463 affects Apex Microelectronics APM32F103 devices, describing a flaw in the flash memory readout protection that can allow physical attackers to extract firmware via the debug interface and exception handling. The NVD metrics show CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score...

4.6CVSS4.6AI score0.00327EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/31 3:21 p.m.•47 views

CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.7AI score0.00327EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•4 views

CVE-2020-13465: Improper Input Validation

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

6.8CVSS6.4AI score0.00538EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•3 views

CVE-2020-13469: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

4.6CVSS5.8AI score0.00387EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•4 views

CVE-2020-13464: Missing Authorization

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

4.2CVSS5.8AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•2 views

CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.6CVSS5.8AI score0.00297EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•1 views

CVE-2020-13472: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...

4.6CVSS5.8AI score0.00387EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•2 views

CVE-2020-13463: Improper Handling of Exceptional Conditions

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

4.6CVSS5.8AI score0.00327EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2020/08/29 12:00 a.m.•88 views

Security update for apache2 (moderate)

openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: 1174052 1175070 1175071 1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabiliti...

9.8CVSS6.8AI score0.90039EPSS
SaveExploits4References4
NVD
NVD
•added 2020/08/26 7:15 p.m.•34 views

CVE-2019-4701

IBM Security Guardium Data Encryption GDE 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936...

5.3CVSS5.2AI score0.00657EPSS
SaveExploits0References2
NVD
NVD
•added 2020/08/26 4:15 p.m.•19 views

CVE-2020-15483

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

7.2CVSS6.5AI score0.00424EPSS
SaveExploits1References2
Prion
Prion
•added 2020/08/26 4:15 p.m.•26 views

Default credentials

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

7.2CVSS6.5AI score0.00424EPSS
SaveExploits1References2
Rows per page
Query Builder