Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/10 2:14 a.m.•25 views

pico2-swd-riscv

pico2-swd-riscv RP2350 RISC-V Hazard3 コア向け SWD デバッグプローブ。1台の Pico2 が別の Pico2 を 2 本の GPIO ワイヤでデバッグします。 0. VIBE CODE 警告(人間が執筆) コードの約 80% はバイブコーディングです。README は(バイブコード警告セクション全体を除いて)ほぼ生成されています。私は多くの夜をオシロスコープとドキュメントとともに過ごし、SBA の読み書き、レジスタの読み書き、抽象コマンド、プログラムバッファを実行できるプロトタイプを動作させました。残りは Claude Code...

6.4AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•5 views

CVE-2025-36753: Authentication Bypass by Spoofing

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 10:43 a.m.•25 views

CVE-2022-32506

An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of code on the processor and debug the firmware, as well as read or alter the content of the internal and external flash...

6.4CVSS6.6AI score0.00434EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•3 views

CVE-2022-32506: Improper Physical Access Control

An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to control the execution of code on the processor and debug the firmware, as well as read or alter the content of the internal and external flash...

6.4CVSS5.9AI score0.00434EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/09 7:47 p.m.•69 views

CVE-2022-32506

Nuki Home Solutions devices are affected by a vulnerability where an attacker with physical access to the circuit board can exploit SWD debug features . This allows the attacker to control code execution on the processor, debug the firmware, and read or alter the content of both internal and exte...

6.4CVSS6.8AI score0.00434EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/26 6:15 a.m.•25 views

Design/Logic Flaw

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

4.8CVSS8AI score0.00334EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/26 12:00 a.m.•45 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.2AI score0.00334EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/26 12:00 a.m.•82 views

CVE-2021-35954

CVE-2021-35954 affects fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker. Affected component: Serial Wire Debug (SWD) feature enables physically proximate attackers to dump firmware, flash custom malicious firmware, and brick the device. Base CVSS v3.1 score 8.1 (HIGH) with ADJACENT attack...

8.1CVSS7.9AI score0.00334EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/09/12 3:00 p.m.•37 views

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9AI score0.004EPSS
SaveExploits1References3
CVE
CVE
•added 2018/09/12 3:00 p.m.•75 views

CVE-2017-18347

CVE-2017-18347 affects STMicroelectronics STM32F0 series devices; the root cause is a race condition between full SWD interface initialization and flash protection setup, enabling physically present attackers to extract protected firmware via a specific SWD command sequence on Level 1 RDP. The co...

4.9CVSS4.9AI score0.004EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/12 12:00 a.m.•6 views

CVE-2017-18347: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...

4.9CVSS5.6AI score0.004EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/09/12 12:00 a.m.•4 views

PT-2018-6843

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32F0 series devices affected versions not specified Description: The issue is related to incorrect access control in RDP Level 1, which allows physically present attackers to extract the device's protected firmware via a...

4.9CVSS0.004EPSS
SaveExploits1References5
Rows per page
Query Builder