CVE-2020-13472: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...

CVE-2020-13469: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

CVE-2020-13465: Improper Input Validation

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

CVE-2020-13464: Missing Authorization

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

CVE-2020-13463: Improper Handling of Exceptional Conditions

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13555

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F130 devices affected versions not specified Description The issue allows physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires, which have insufficient physical...

CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13554

Name of the Vulnerable Software and Affected Versions CKS32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in CKS32F103 devices, which can be exploited by physical attackers. They can extract firmware via the debug interface and...

PT-2020-13551

Name of the Vulnerable Software and Affected Versions China Key Systems & Integrated Circuit CKS32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in CKS32F103 devices, which can be exploited by physical attackers to extract firmware...

PT-2020-13556

Name of the Vulnerable Software and Affected Versions Gigadevice GD32VF103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32VF103 devices, which can be exploited by physical attackers to extract firmware via the debug...

PT-2020-13559

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32F103 devices, which can be exploited by physical attackers to extract firmware. This is achieved b...

PT-2020-13550

Name of the Vulnerable Software and Affected Versions Apex Microelectronics APM32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Apex Microelectronics APM32F103 devices, which can be exploited by physical attackers. They can extra...

PT-2020-13552

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The security protection in the devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface. Recommendations At the...

Security update for apache2 (moderate)

openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: 1174052 1175070 1175071 1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabiliti...

CVE-2019-4701

IBM Security Guardium Data Encryption GDE 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936...

CVE-2020-15483

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

Default credentials

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

CVE-2020-15483

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

CVE-2020-15483

CVE-2020-15483 affects Nescomed Multipara Monitor M1000 devices. The issue is a passwordless, full-access shell via the physical UART debug port, granting local/physical access with high impact on confidentiality, integrity, and availability. Public documentation in NVD/Red Hat confirms the UART ...

PT-2020-14450 · Nescomed · Nescomed Multipara Monitor M1000

Name of the Vulnerable Software and Affected Versions: Nescomed Multipara Monitor M1000 devices affected versions not specified Description: An issue was discovered where the physical UART debug port on the devices provides a shell without requiring a password, giving complete access...