Lucene search
+L

324 matches found

Cvelist
Cvelist
•added 2019/09/12 5:43 p.m.•54 views

CVE-2019-14236

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated by observing CPU registers and the effect of code/instruction execution...

9.7AI score0.02261EPSS
SaveExploits1References1
CVE
CVE
•added 2019/09/12 5:43 p.m.•160 views

CVE-2019-14236

The CVE-2019-14236 entry concerns STMicroelectronics STM32L0/L1/L4/F4/F7/H7 microcontrollers where Proprietary Code Read Out Protection (PCROP) can be defeated by observing CPU registers and the effects of code execution. Affected components are PCROP-protected regions on these devices, with the ...

9.8CVSS9.5AI score0.02261EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/09/12 3:29 p.m.•28 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/09/12 3:00 p.m.•37 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9AI score0.004EPSS
SaveExploits1References3
CVE
CVE
•added 2018/09/12 3:00 p.m.•75 views

CVE-2017-18347

CVE-2017-18347 affects STMicroelectronics STM32F0 series devices; the root cause is a race condition between full SWD interface initialization and flash protection setup, enabling physically present attackers to extract protected firmware via a specific SWD command sequence on Level 1 RDP. The co...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/12 12:00 a.m.•7 views

CVE-2017-18347: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS5.6AI score0.004EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2017/01/18 12:00 a.m.•15 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the STMicroelectronics Android operating system driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

2.6CVSS5.9AI score0.00764EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/01/18 12:00 a.m.•20 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the STMicroelectronics operating system’s driver is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause a service failure or otherwise affect the system...

2.6CVSS5.9AI score0.00764EPSS
SaveExploits0References2
OSV
OSV
•added 2017/01/12 8:59 p.m.•16 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
OSV
OSV
•added 2017/01/12 8:59 p.m.•21 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
NVD
NVD
•added 2017/01/12 8:59 p.m.•25 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS3.7AI score0.00764EPSS
SaveExploits0References2
NVD
NVD
•added 2017/01/12 8:59 p.m.•31 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS3.7AI score0.00764EPSS
SaveExploits0References2
Prion
Prion
•added 2017/01/12 8:59 p.m.•27 views

Information disclosure

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

2.6CVSS5.6AI score0.00764EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/01/12 8:59 p.m.•22 views

Information disclosure

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

2.6CVSS5.6AI score0.00764EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/01/12 8:00 p.m.•44 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4AI score0.00764EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/01/12 8:00 p.m.•40 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4AI score0.00764EPSS
SaveExploits0References2
CVE
CVE
•added 2017/01/12 8:00 p.m.•65 views

CVE-2016-8473

CVE-2016-8473 is an information-disclosure vulnerability in the STMicroelectronics driver on Android (Kernel-3.10). A local, malicious app could access data outside its permissions after compromising a privileged process. Affected devices listed for this CVE include Nexus 5X and Nexus 6P. The pat...

4.7CVSS4.4AI score0.00764EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/01/12 8:00 p.m.•78 views

CVE-2016-8474

CVE-2016-8474 is an information disclosure vulnerability in the STMicroelectronics driver on Android (kernel 3.10). A local malicious app could access data beyond its permissions, requiring compromise of a privileged process. CVSS3: 4.7 (MEDIUM), local, user interaction required; confidentiality ...

4.7CVSS4.4AI score0.00764EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•8 views

CVE-2016-8474: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•9 views

CVE-2016-8473: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
Rows per page
Query Builder