PT-2021-18197

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32L4 devices affected versions not specified Description: The issue concerns incorrect physical access control in the affected devices. Recommendations: At the moment, there is no information about a newer version that...

CVE-2021-29414: Improper Neutralization of Special Elements in Output Used by a Downstream Component

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

STMicroelectronics STM32L4 注入漏洞

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. The STMicroelectronics STM32L4 suffers from an access control error vulnerability that stems from the fact that flash readout protection can be degraded from RDP...

STMicroelectronics STM32L4 注入漏洞

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. A security vulnerability exists in STMicroelectronics STM32L4 devices, which arises from having incorrect physical access control. No details of the vulnerability...

CVE-2020-13466

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

Design/Logic Flaw

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13466

The CVE-2020-13466 entry concerns STMicroelectronics STM32F103 devices. The vulnerability is a local, physical-access issue where an attacker can trigger arbitrary code execution through a power glitch combined with a specific flash patch/breakpoint unit configuration. The description and linked ...

CVE-2020-13466

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13466: Undefined Security Weakness

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-8004

STMicroelectronics STM32F1 devices have Incorrect Access Control...

Improper access control

STMicroelectronics STM32F1 devices have Incorrect Access Control...

CVE-2020-8004

STMicroelectronics STM32F1 devices have Incorrect Access Control...

CVE-2020-8004

The CVE-2020-8004 entry concerns STMicroelectronics STM32F1 devices and describes an improper access control vulnerability. Connected sources corroborate a memory-access risk in the STM32F1 MCU family, enabling information disclosure by bypassing access controls. The core issue appears to be insu...

CVE-2020-8004

STMicroelectronics STM32F1 devices have Incorrect Access Control...

PT-2020-19913

Name of the Vulnerable Software and Affected Versions STMicroelectronics STM32F1 devices affected versions not specified Description The issue is related to Incorrect Access Control in the devices. There is no information provided about the estimated number of potentially affected devices worldwi...

CVE-2020-8004: Undefined Security Weakness

STMicroelectronics STM32F1 devices have Incorrect Access Control...

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors allows a hacker to restore the values of secret keys stored in the TPM (Trusted Platform Module).

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to retrieve the values of secret keys...

A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices

A team of cybersecurity researchers late last week disclosed the existence of 12 potentially severe security vulnerabilities, collectively named 'SweynTooth,' affecting millions of Bluetooth-enabled wireless smart devices worldwide—and worryingly, a few of which haven't yet been patched. All...

A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices

A team of cybersecurity researchers late last week disclosed the existence of 12 potentially severe security vulnerabilities, collectively named 'SweynTooth ,' affecting millions of Bluetooth-enabled wireless smart devices worldwide—and worryingly, a few of which haven't yet been patched. All...

CVE-2019-19192

The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol ATT requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets...