Skip to content
OpenAdvisories
Unscored CVE-2017-18347 EUVD-2017-9472GHSA-5f4r-g29m-jw8q

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the dev…

Published Sep 12, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

References