STMicroelectronics STM32Cube Middleware 安全漏洞

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A security vulnerability exists in the STMicroelectronics STM32Cube Middleware, which is a problem with the USBH ParseDevDesc function that results in a denial of...

CVE-2021-34262: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseEPDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34260: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

CVE-2021-34268: Undefined Security Weakness

An issue in the USBHParseDevDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS via a malformed USB device packet...

CVE-2021-34267: Undefined Security Weakness

An in the USBHMSCInterfaceInit function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service DOS when the system tries to communicate with the connected endpoint...

Unspecified Vulnerability in STMicroelectronics STM32L4

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. A security vulnerability exists in STMicroelectronics STM32L4 devices, which arises from having incorrect physical access control. No details of the vulnerability...

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

CVE-2021-29414

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

Improper access control

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

Design/Logic Flaw

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

CVE-2021-29414

Technical details for CVE-2021-29414 are not provided in the supplied documents; no concrete vulnerable components, versions, or fixes are disclosed. Monitor official advisories for updates.

CVE-2021-29414

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

CVE-2020-27212: Improper Neutralization of Special Elements in Output Used by a Downstream Component

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

STMicroelectronics STM32L4 注入漏洞

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. A security vulnerability exists in STMicroelectronics STM32L4 devices, which arises from having incorrect physical access control. No details of the vulnerability...

STMicroelectronics STM32L4 注入漏洞

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. The STMicroelectronics STM32L4 suffers from an access control error vulnerability that stems from the fact that flash readout protection can be degraded from RDP...

CVE-2021-29414: Improper Neutralization of Special Elements in Output Used by a Downstream Component

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control...

CVE-2020-13466

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

Design/Logic Flaw

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13466

The CVE-2020-13466 entry concerns STMicroelectronics STM32F103 devices. The vulnerability is a local, physical-access issue where an attacker can trigger arbitrary code execution through a power glitch combined with a specific flash patch/breakpoint unit configuration. The description and linked ...