PT-2020-13553

Name of the Vulnerable Software and Affected Versions STMicroelectronics STM32F103 devices affected versions not specified Description The issue allows physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration. Recommendations At the...

CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13466: Undefined Security Weakness

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

PT-2020-13559

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32F103 devices, which can be exploited by physical attackers to extract firmware. This is achieved b...

PT-2020-13558

Name of the Vulnerable Software and Affected Versions Apex Microelectronics APM32F103 devices affected versions not specified Description The issue allows physical attackers to execute arbitrary code on the devices via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13471: Undefined Security Weakness

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13472: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...

Design/Logic Flaw

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

CVE-2020-15485

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

CVE-2020-15485: Cleartext Storage of Sensitive Information

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

PT-2020-14452

Name of the Vulnerable Software and Affected Versions Nescomed Multipara Monitor M1000 affected versions not specified Description An issue was discovered where the onboard Flash memory stores data in cleartext, without integrity protection against tampering. Recommendations At the moment, there ...

CVE-2020-15639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decryptFile method of the FlashValidatorServiceImpl class. The iss...

CVE-2020-14369

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash fi...

PT-2020-6014

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms affected versions not specified Description A Cross Site Request Forgery vulnerability was found in Red Hat CloudForms, which forces end users to execute unwanted actions on a web application in which the user is currently...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

Directory traversal

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858: Improper Limitation of a Pathname to a Restricted Directory

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

CVE-2020-15858 describes a Directory Traversal flaw in Thales DIS (Cinterion) modules where the directory path access check of the internal flash file system can be bypassed. This enables proximate attackers to access sensitive data stored in the UFS, including application data and data used by J...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...