CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13559

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32F103 devices, which can be exploited by physical attackers to extract firmware. This is achieved b...

CVE-2020-13471: Undefined Security Weakness

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13469: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

CVE-2020-13466: Undefined Security Weakness

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

PT-2020-13558

Name of the Vulnerable Software and Affected Versions Apex Microelectronics APM32F103 devices affected versions not specified Description The issue allows physical attackers to execute arbitrary code on the devices via a power glitch and a specific flash patch/breakpoint unit configuration...

Design/Logic Flaw

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

CVE-2020-15485

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

CVE-2020-15485: Cleartext Storage of Sensitive Information

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

PT-2020-14452

Name of the Vulnerable Software and Affected Versions Nescomed Multipara Monitor M1000 affected versions not specified Description An issue was discovered where the onboard Flash memory stores data in cleartext, without integrity protection against tampering. Recommendations At the moment, there ...

CVE-2020-15639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is not required to exploit this vulnerability. The specific flaw exists within the decryptFile method of the FlashValidatorServiceImpl class. The iss...

CVE-2020-14369

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash fi...

PT-2020-6014

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms affected versions not specified Description A Cross Site Request Forgery vulnerability was found in Red Hat CloudForms, which forces end users to execute unwanted actions on a web application in which the user is currently...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

Directory traversal

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858: Improper Limitation of a Pathname to a Restricted Directory

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

PT-2020-14670

Name of the Vulnerable Software and Affected Versions Thales DIS formerly Gemalto, formerly Cinterion BGS5 versions up to and including SW RN 02.000 / ARN 01.001.06 Thales DIS formerly Gemalto, formerly Cinterion EHSx versions up to and including SW RN 04.003 / ARN 01.000.04 Thales DIS formerly...