Lucene search
+L

324 matches found

Cvelist
Cvelist
•added 2019/09/12 5:43 p.m.•55 views

CVE-2019-14236

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated by observing CPU registers and the effect of code/instruction execution...

9.7AI score0.02261EPSS
SaveExploits1References1
CVE
CVE
•added 2019/09/12 5:43 p.m.•163 views

CVE-2019-14236

The CVE-2019-14236 entry concerns STMicroelectronics STM32L0/L1/L4/F4/F7/H7 microcontrollers where Proprietary Code Read Out Protection (PCROP) can be defeated by observing CPU registers and the effects of code execution. Affected components are PCROP-protected regions on these devices, with the ...

9.8CVSS9.5AI score0.02261EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/09/12 3:29 p.m.•32 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3
CVE
CVE
•added 2018/09/12 3:00 p.m.•77 views

CVE-2017-18347

CVE-2017-18347 affects STMicroelectronics STM32F0 series devices; the root cause is a race condition between full SWD interface initialization and flash protection setup, enabling physically present attackers to extract protected firmware via a specific SWD command sequence on Level 1 RDP. The co...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2018/09/12 3:00 p.m.•44 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9AI score0.004EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/12 12:00 a.m.•10 views

CVE-2017-18347: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS5.6AI score0.004EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2017/01/18 12:00 a.m.•20 views

Android DoS

The vulnerability of the STMicroelectronics operating system’s driver is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause a service failure or otherwise affect the system...

2.6CVSS5.9AI score0.00764EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/01/18 12:00 a.m.•17 views

Android DoS

The vulnerability of the STMicroelectronics Android operating system driver is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

2.6CVSS5.9AI score0.00764EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2017/01/12 8:59 p.m.•17 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
NVD
NVD
•added 2017/01/12 8:59 p.m.•33 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS3.7AI score0.00764EPSS
SaveExploits0References2
NVD
NVD
•added 2017/01/12 8:59 p.m.•27 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS3.7AI score0.00764EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2017/01/12 8:59 p.m.•24 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
Prion
Prion
•added 2017/01/12 8:59 p.m.•29 views

Information disclosure

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

2.6CVSS5.6AI score0.00764EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/01/12 8:59 p.m.•24 views

Information disclosure

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

2.6CVSS5.6AI score0.00764EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/01/12 8:00 p.m.•44 views

CVE-2016-8474

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4AI score0.00764EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/01/12 8:00 p.m.•42 views

CVE-2016-8473

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4AI score0.00764EPSS
SaveExploits0References2
CVE
CVE
•added 2017/01/12 8:00 p.m.•78 views

CVE-2016-8474

CVE-2016-8474 is an information disclosure vulnerability in the STMicroelectronics driver on Android (kernel 3.10). A local malicious app could access data beyond its permissions, requiring compromise of a privileged process. CVSS3: 4.7 (MEDIUM), local, user interaction required; confidentiality ...

4.7CVSS4.4AI score0.00764EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/01/12 8:00 p.m.•67 views

CVE-2016-8473

CVE-2016-8473 is an information-disclosure vulnerability in the STMicroelectronics driver on Android (Kernel-3.10). A local, malicious app could access data outside its permissions after compromising a privileged process. Affected devices listed for this CVE include Nexus 5X and Nexus 6P. The pat...

4.7CVSS4.4AI score0.00764EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•5 views

PT-2017-1025

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 Description The issue is related to an information disclosure vulnerability in the STMicroelectronics driver, which could allow a local malicious application to access data outside of its permission levels. This...

4.7CVSS0.00764EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/12 12:00 a.m.•10 views

CVE-2016-8473: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

4.7CVSS5.8AI score0.00764EPSS
SaveExploits0References2
Rows per page
Query Builder