CVE-2017-13096

CVE-2017-13096 concerns the IEEE P1735 standard where the Rights Block (RSA-encrypted AES key) can be modified to remove or relax access control. The connected sources document a cryptographic design flaw that enables an attacker with access to EDA tools or to the standard’s workflow to alter rig...

CVE-2017-13097

CVE-2017-13097 refers to a weakness in the IEEE P1735 standard where an attacker can modify the Rights Block to remove or relax license requirements. The associated CERT/NVD entries describe this as part of a broader set of flaws in P1735 that can enable recovery of plaintext IP and insertion of ...

CVE-2017-13094 The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of the encryption key and insertion of hardware trojans in any IP. The methods are flawed and, in the most...

CVE-2017-13094

The CVE-2017-13094 entry concerns flaws in the IEEE P1735 cryptographic workflow for encrypting electronic-design IP. The available documents describe that the standard enables manipulation of the encryption key and insertion of hardware trojans into IP, potentially allowing an attacker to recove...

CVE-2017-13093 The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases...

CVE-2017-13093

The CVE-2017-13093 entry documents a vulnerability in the IEEE P1735 cryptographic workflow where an attacker can modify encrypted IP ciphertext to insert hardware Trojans. Affected scope comes from the P1735 standard used in EDA tools and IP workflows, enabling potential IP theft or compromised ...

CVE-2017-13097 The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of Rights Block to remove or relax license requirement. The methods are flawed and, in the most egregious case...

CVE-2017-13097: Undefined Security Weakness

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of Rights Block to remove or relax license requirement. The methods are flawed and, in the most egregious case...

PT-2018-5468

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights. Specifically, the improperly specified padding in CBC mod...

PT-2018-5472

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed encryption methods for electronic-design intellectual property IP and access rights management. These flaws can enable attack vectors, allowing recover...

PT-2018-5474

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights. These flaws enable attack vectors, allowing recovery of t...

PT-2018-5473

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights. These flaws enable attack vectors, allowing recovery of t...

PT-2018-5469

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights. The improperly specified HDL syntax can be exploited usin...

PT-2018-5471

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights. These flaws can enable attack vectors, allowing recovery ...

PT-2018-5470

Name of the Vulnerable Software and Affected Versions: IEEE P1735 affected versions not specified Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property IP and managing access rights, which can enable attack vectors to recover the underlying...

CVE-2017-13093: Undefined Security Weakness

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases...

CVE-2017-13095: Undefined Security Weakness

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of a license-deny response to a license grant. The methods are flawed and, in the most egregious cases, enable...

CVE-2017-13096: Undefined Security Weakness

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of Rights Block to remove or relax access control. The methods are flawed and, in the most egregious cases,...

CVE-2017-13094: Undefined Security Weakness

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property IP, as well as the management of access rights for such IP, including modification of the encryption key and insertion of hardware trojans in any IP. The methods are flawed and, in the most...

Secutech DSL WR RIS 330 - Filter Bypass Vulnerability

Document Title: =============== Secutech DSL WR RIS 330 - Filter Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1988 Release Date: ============= 2018-07-08 Vulnerability Laboratory ID VL-ID: ==================================== 198...