Lucene search
+L

19 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/24 1:16 p.m.•49 views

Realtek RTL8762C SWD Information Disclosure

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

7.6CVSS6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 10:34 a.m.•25 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS5.7AI score0.004EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 12:30 p.m.•22 views

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

8.6CVSS5.9AI score0.00319EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/13 6:30 p.m.•21 views

EUVD-2025-203255

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

8.6CVSS5.9AI score0.00319EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/12/13 4:16 p.m.•25 views

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

9.8CVSS5.9AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/13 8:16 a.m.•51 views

CVE-2025-36753

The CVE-2025-36753 entry concerns the Growatt ShineLan-X dongle with the SWD debug interface enabled by default. The exposed SWD interface allows an attacker to gain debug access and potentially extract secrets or domains from the device. The root cause is the default-access SWD debug interface; ...

9.8CVSS5.9AI score0.00319EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/13 8:16 a.m.•13 views

CVE-2025-36753 SWD Interface Open on Growatt ShineLan-X

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

8.6CVSS5.9AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•18 views

Growatt ShineLan-X security vulnerabilities

Growatt ShineLan-X is a data logger for PV inverters from Growatt China. A security vulnerability exists in Growatt ShineLan-X, which stems from the SWD debugging interface enabled by default and could lead to the extraction of device secrets or domains...

9.8CVSS5.9AI score0.00319EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-9472

Malware in sbrugna...

4.9CVSS5.7AI score0.004EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-22589

Malware in sbrugna...

8.1CVSS7.6AI score0.00334EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 6:38 p.m.•20 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS7.6AI score0.00334EPSS
SaveExploits0
NVD
NVD
•added 2022/12/26 6:15 a.m.•30 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/26 12:00 a.m.•14 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

6.9AI score0.00334EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•11 views

CVE-2021-35954: Undefined Security Weakness

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS5.8AI score0.00334EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•18 views

PT-2022-10481 · Unknown · Fastrack Reflex 2.0

Name of the Vulnerable Software and Affected Versions: fastrack Reflex 2.0 W307S REFLEX v90.89 Activity Tracker version 90.89 Description: The issue allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD...

8.1CVSS8AI score0.00334EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/09/12 3:00 p.m.•42 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9AI score0.004EPSS
SaveExploits1References3
CVE
CVE
•added 2018/09/12 3:00 p.m.•77 views

CVE-2017-18347

CVE-2017-18347 affects STMicroelectronics STM32F0 series devices; the root cause is a race condition between full SWD interface initialization and flash protection setup, enabling physically present attackers to extract protected firmware via a specific SWD command sequence on Level 1 RDP. The co...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2018/09/12 12:00 a.m.•8 views

PT-2018-6843

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32F0 series devices affected versions not specified Description: The issue is related to incorrect access control in RDP Level 1, which allows physically present attackers to extract the device's protected firmware via a...

4.9CVSS0.004EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/12 12:00 a.m.•10 views

CVE-2017-18347: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS5.6AI score0.004EPSS
SaveExploits1References2
Rows per page
Query Builder