CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13550

Name of the Vulnerable Software and Affected Versions Apex Microelectronics APM32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Apex Microelectronics APM32F103 devices, which can be exploited by physical attackers. They can extra...

CVE-2020-13469: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

CVE-2020-13463: Improper Handling of Exceptional Conditions

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2020-13472: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...

PT-2020-13551

Name of the Vulnerable Software and Affected Versions China Key Systems & Integrated Circuit CKS32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in CKS32F103 devices, which can be exploited by physical attackers to extract firmware...

CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13554

Name of the Vulnerable Software and Affected Versions CKS32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in CKS32F103 devices, which can be exploited by physical attackers. They can extract firmware via the debug interface and...

PT-2020-13559

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32F103 devices, which can be exploited by physical attackers to extract firmware. This is achieved b...

CVE-2020-13464: Missing Authorization

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

PT-2020-13556

Name of the Vulnerable Software and Affected Versions Gigadevice GD32VF103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32VF103 devices, which can be exploited by physical attackers to extract firmware via the debug...

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

DEF CON 2019: Researchers Demo Hacking Google Home for RCE

LAS VEGAS – The Tencent Blade Team of researchers demonstrated several ways they have developed to hack and run remote code on Google Home smart speakers. The hacks center around what is known as a Magellan vulnerability, which can be used to exploit the massively popular SQLite database engine...

CVE-2017-8226

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...

Router 0day vulnerability discovery practical-vulnerability warning-the black bar safety net

! Last year 7 month in the company's internal share over this issue, said to also almost a year, too lazy to now only issued to. In 2018, 3, 4 on more than two or three months time, spent more and more time to engage in a domestic router, dug some holes, after also don't get it. Also wrote a litt...

Hacking microcontroller firmware through a USB

In this article, I want to demonstrate extracting the firmware from a secure USB device running on the Cortex M0. Who hacks video game consoles? The manufacture of counterfeit and unlicensed products is widespread in the world of video game consoles. It's a multi-billion dollar industry in which...

Yi Technology Home Camera 27US Firmware 7z CRC Collision Vulnerability

Summary An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this...

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

CVE-2017-18347

CVE-2017-18347 affects STMicroelectronics STM32F0 series devices; the root cause is a race condition between full SWD interface initialization and flash protection setup, enabling physically present attackers to extract protected firmware via a specific SWD command sequence on Level 1 RDP. The co...

CVE-2017-18347: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...