9609 matches found
Memory corruption
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...
CVE-2020-13472
CVE-2020-13472 describes a vulnerability in Gigadevice GD32F103 devices where the flash memory readout protection can be bypassed by a physical attacker via the debug interface using the DMA module to extract firmware. The connected records corroborate the affected hardware family and the attack ...
CVE-2020-13470
CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...
CVE-2020-13470
Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...
CVE-2020-13469
CVE-2020-13469 concerns the GD32VF103 family from Gigadevice, where the flash readout protection can be defeated by a physically present attacker through the debug interface and CPU access to extract firmware. The issue is described as a hardware/firmware protection bypass enabling firmware extra...
CVE-2020-13467
The CVE-2020-13467 entry concerns China Key Systems & Integrated Circuit CKS32F103 devices where the flash memory readout protection can be bypassed, allowing physical attackers to extract firmware via the debug interface and exception handling. The vulnerability is described in the NVD entry as ...
CVE-2020-13467
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
CVE-2020-13464
CVE-2020-13464 affects China Key Systems & Integrated Circuit CKS32F103 devices. The vulnerability is in the flash memory readout protection, allowing a physical attacker to extract firmware through the debug interface by leveraging the CPU or DMA module. Impact stated in sources is firmware disc...
CVE-2020-13464
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...
CVE-2020-13463
CVE-2020-13463 affects Apex Microelectronics APM32F103 devices, describing a flaw in the flash memory readout protection that can allow physical attackers to extract firmware via the debug interface and exception handling. The NVD metrics show CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score...
CVE-2020-13463
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
Medium: lynis
Issue Overview: In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be...
FreeBSD : ark -- extraction outside of extraction directory (38fdf07b-e8ec-11ea-8bbe-e0d55e2a8bf9)
Albert Astals Cid reports : Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction. Proof of concept For testing, an example of malicious archive can be found at dirsymlink.tar Impact Users can unwillingly...
EulerOS 2.0 SP8 : icedtea-web (EulerOS-SA-2020-1856)
According to the versions of the icedtea-web package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising th...
ark -- extraction outside of extraction directory
Albert Astals Cid reports: Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction. Proof of concept For testing, an example of malicious archive can be found at dirsymlink.tar Impact Users can unwillingly...
CVE-2020-15486
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...
Design/Logic Flaw
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...
MGASA-2020-0323 Updated ark packages fix security vulnerability
A maliciously crafted archive with "../" in the file paths would install files anywhere in the user's home directory upon extraction CVE-2020-16116...
