4.9

CVE-2017-18347

Exploit
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
St ≫ Stm32f071rb Firmware Version -
   St ≫ Stm32f071rb Version -
St ≫ Stm32f071v8 Firmware Version -
   St ≫ Stm32f071v8 Version -
St ≫ Stm32f071vb Firmware Version -
   St ≫ Stm32f071vb Version -
St ≫ Stm32f072c8 Firmware Version -
   St ≫ Stm32f072c8 Version -
St ≫ Stm32f072cb Firmware Version -
   St ≫ Stm32f072cb Version -
St ≫ Stm32f072r8 Firmware Version -
   St ≫ Stm32f072r8 Version -
St ≫ Stm32f072rb Firmware Version -
   St ≫ Stm32f072rb Version -
St ≫ Stm32f072v8 Firmware Version -
   St ≫ Stm32f072v8 Version -
St ≫ Stm32f072vb Firmware Version -
   St ≫ Stm32f072vb Version -
St ≫ Stm32f078cb Firmware Version -
   St ≫ Stm32f078cb Version -
St ≫ Stm32f078rb Firmware Version -
   St ≫ Stm32f078rb Version -
St ≫ Stm32f078vb Firmware Version -
   St ≫ Stm32f078vb Version -
St ≫ Stm32f091cb Firmware Version -
   St ≫ Stm32f091cb Version -
St ≫ Stm32f091cc Firmware Version -
   St ≫ Stm32f091cc Version -
St ≫ Stm32f091rb Firmware Version -
   St ≫ Stm32f091rb Version -
St ≫ Stm32f091rc Firmware Version -
   St ≫ Stm32f091rc Version -
St ≫ Stm32f091vb Firmware Version -
   St ≫ Stm32f091vb Version -
St ≫ Stm32f091vc Firmware Version -
   St ≫ Stm32f091vc Version -
St ≫ Stm32f098cc Firmware Version -
   St ≫ Stm32f098cc Version -
St ≫ Stm32f098rc Firmware Version -
   St ≫ Stm32f098rc Version -
St ≫ Stm32f098vc Firmware Version -
   St ≫ Stm32f098vc Version -
St ≫ Stm32f070c6 Firmware Version -
   St ≫ Stm32f070c6 Version -
St ≫ Stm32f070cb Firmware Version -
   St ≫ Stm32f070cb Version -
St ≫ Stm32f070f6 Firmware Version -
   St ≫ Stm32f070f6 Version -
St ≫ Stm32f070rb Firmware Version -
   St ≫ Stm32f070rb Version -
St ≫ Stm32f071c8 Firmware Version -
   St ≫ Stm32f071c8 Version -
St ≫ Stm32f071cb Firmware Version -
   St ≫ Stm32f071cb Version -
St ≫ Stm32f051t8 Firmware Version -
   St ≫ Stm32f051t8 Version -
St ≫ Stm32f058c8 Firmware Version -
   St ≫ Stm32f058c8 Version -
St ≫ Stm32f058r8 Firmware Version -
   St ≫ Stm32f058r8 Version -
St ≫ Stm32f058t8 Firmware Version -
   St ≫ Stm32f058t8 Version -
St ≫ Stm32f070c6 Firmware Version -
   St ≫ Stm32f070c6 Version -
St ≫ Stm32f051k4 Firmware Version -
   St ≫ Stm32f051k4 Version -
St ≫ Stm32f051k6 Firmware Version -
   St ≫ Stm32f051k6 Version -
St ≫ Stm32f051k8 Firmware Version -
   St ≫ Stm32f051k8 Version -
St ≫ Stm32f051r4 Firmware Version -
   St ≫ Stm32f051r4 Version -
St ≫ Stm32f051r6 Firmware Version -
   St ≫ Stm32f051r6 Version -
St ≫ Stm32f051r8 Firmware Version -
   St ≫ Stm32f051r8 Version -
St ≫ Stm32f042t6 Firmware Version -
   St ≫ Stm32f042t6 Version -
St ≫ Stm32f048c6 Firmware Version -
   St ≫ Stm32f048c6 Version -
St ≫ Stm32f048g6 Firmware Version -
   St ≫ Stm32f048g6 Version -
St ≫ Stm32f048t6 Firmware Version -
   St ≫ Stm32f048t6 Version -
St ≫ Stm32f051c4 Firmware Version -
   St ≫ Stm32f051c4 Version -
St ≫ Stm32f051c6 Firmware Version -
   St ≫ Stm32f051c6 Version -
St ≫ Stm32f051c8 Firmware Version -
   St ≫ Stm32f051c8 Version -
St ≫ Stm32f042f4 Firmware Version -
   St ≫ Stm32f042f4 Version -
St ≫ Stm32f042f6 Firmware Version -
   St ≫ Stm32f042f6 Version -
St ≫ Stm32f042g4 Firmware Version -
   St ≫ Stm32f042g4 Version -
St ≫ Stm32f042g6 Firmware Version -
   St ≫ Stm32f042g6 Version -
St ≫ Stm32f042k4 Firmware Version -
   St ≫ Stm32f042k4 Version -
St ≫ Stm32f042k6 Firmware Version -
   St ≫ Stm32f042k6 Version -
St ≫ Stm32f038c6 Firmware Version -
   St ≫ Stm32f038c6 Version -
St ≫ Stm32f038e6 Firmware Version -
   St ≫ Stm32f038e6 Version -
St ≫ Stm32f038f6 Firmware Version -
   St ≫ Stm32f038f6 Version -
St ≫ Stm32f038g6 Firmware Version -
   St ≫ Stm32f038g6 Version -
St ≫ Stm32f038k6 Firmware Version -
   St ≫ Stm32f038k6 Version -
St ≫ Stm32f042c4 Firmware Version -
   St ≫ Stm32f042c4 Version -
St ≫ Stm32f042c6 Firmware Version -
   St ≫ Stm32f042c6 Version -
St ≫ Stm32f031e6 Firmware Version -
   St ≫ Stm32f031e6 Version -
St ≫ Stm32f031f4 Firmware Version -
   St ≫ Stm32f031f4 Version -
St ≫ Stm32f031f6 Firmware Version -
   St ≫ Stm32f031f6 Version -
St ≫ Stm32f031g4 Firmware Version -
   St ≫ Stm32f031g4 Version -
St ≫ Stm32f031g6 Firmware Version -
   St ≫ Stm32f031g6 Version -
St ≫ Stm32f031k4 Firmware Version -
   St ≫ Stm32f031k4 Version -
St ≫ Stm32f030f4 Firmware Version -
   St ≫ Stm32f030f4 Version -
St ≫ Stm32f030k6 Firmware Version -
   St ≫ Stm32f030k6 Version -
St ≫ Stm32f030r8 Firmware Version -
   St ≫ Stm32f030r8 Version -
St ≫ Stm32f030rc Firmware Version -
   St ≫ Stm32f030rc Version -
St ≫ Stm32f031c4 Firmware Version -
   St ≫ Stm32f031c4 Version -
St ≫ Stm32f031c6 Firmware Version -
   St ≫ Stm32f031c6 Version -
St ≫ Stm32f030c6 Firmware Version -
   St ≫ Stm32f030c6 Version -
St ≫ Stm32f030c8 Firmware Version -
   St ≫ Stm32f030c8 Version -
St ≫ Stm32f030cc Firmware Version -
   St ≫ Stm32f030cc Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.316
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32
Vendor Advisory
https://www.aisec.fraunhofer.de/en/FirmwareProtection.html
Third Party Advisory
Exploit
https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier
Third Party Advisory
Exploit