Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/24 12:00 a.m.•9 views

CVE-2019-14239: Improper Authentication

On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls FAC a software IP protection method for execute-only access can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register...

6.6CVSS6.7AI score0.00401EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/09/24 12:00 a.m.•5 views

PT-2019-13554

Name of the Vulnerable Software and Affected Versions NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices affected versions not specified Description The issue concerns the Flash Access Controls FAC method, which is a software IP protection technique for execute-only access. It can be defeate...

6.6CVSS0.00401EPSS
SaveExploits1References3
NVD
NVD
•added 2019/09/12 6:15 p.m.•27 views

CVE-2019-14237

On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls FAC a software IP protection method for execute-only access can be defeated by observing CPU registers and the effect of code/instruction execution...

9.8CVSS9.7AI score0.02923EPSS
SaveExploits1References1
CVE
CVE
•added 2019/09/12 5:56 p.m.•156 views

CVE-2019-14237

The CVE concerns NXP Kinetis KV1x, KV3x, and K8x devices where Flash Access Controls (FAC) execute-only protection can be defeated by observing CPU registers and the effects of code execution. The impact is the circumvention of execute-only protection as described; no specific remediation or patc...

9.8CVSS9.5AI score0.02923EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/09/12 12:00 a.m.•6 views

PT-2019-13552

Name of the Vulnerable Software and Affected Versions NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices affected versions not specified Description The issue concerns the Flash Access Controls FAC method, which is a software IP protection technique for execute-only access. It can be bypasse...

9.8CVSS0.02923EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/12 12:00 a.m.•10 views

CVE-2019-14237: Incorrect Authorization

On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls FAC a software IP protection method for execute-only access can be defeated by observing CPU registers and the effect of code/instruction execution...

9.8CVSS8.2AI score0.02923EPSS
SaveExploits1References2
Rows per page
Query Builder