4.9

CVE-2017-18347

Exploit

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

Data is provided by the National Vulnerability Database (NVD)
St ≫ Stm32f071rb Firmware Version-
   St ≫ Stm32f071rb Version-
St ≫ Stm32f071v8 Firmware Version-
   St ≫ Stm32f071v8 Version-
St ≫ Stm32f071vb Firmware Version-
   St ≫ Stm32f071vb Version-
St ≫ Stm32f072c8 Firmware Version-
   St ≫ Stm32f072c8 Version-
St ≫ Stm32f072cb Firmware Version-
   St ≫ Stm32f072cb Version-
St ≫ Stm32f072r8 Firmware Version-
   St ≫ Stm32f072r8 Version-
St ≫ Stm32f072rb Firmware Version-
   St ≫ Stm32f072rb Version-
St ≫ Stm32f072v8 Firmware Version-
   St ≫ Stm32f072v8 Version-
St ≫ Stm32f072vb Firmware Version-
   St ≫ Stm32f072vb Version-
St ≫ Stm32f078cb Firmware Version-
   St ≫ Stm32f078cb Version-
St ≫ Stm32f078rb Firmware Version-
   St ≫ Stm32f078rb Version-
St ≫ Stm32f078vb Firmware Version-
   St ≫ Stm32f078vb Version-
St ≫ Stm32f091cb Firmware Version-
   St ≫ Stm32f091cb Version-
St ≫ Stm32f091cc Firmware Version-
   St ≫ Stm32f091cc Version-
St ≫ Stm32f091rb Firmware Version-
   St ≫ Stm32f091rb Version-
St ≫ Stm32f091rc Firmware Version-
   St ≫ Stm32f091rc Version-
St ≫ Stm32f091vb Firmware Version-
   St ≫ Stm32f091vb Version-
St ≫ Stm32f091vc Firmware Version-
   St ≫ Stm32f091vc Version-
St ≫ Stm32f098cc Firmware Version-
   St ≫ Stm32f098cc Version-
St ≫ Stm32f098rc Firmware Version-
   St ≫ Stm32f098rc Version-
St ≫ Stm32f098vc Firmware Version-
   St ≫ Stm32f098vc Version-
St ≫ Stm32f070c6 Firmware Version-
   St ≫ Stm32f070c6 Version-
St ≫ Stm32f070cb Firmware Version-
   St ≫ Stm32f070cb Version-
St ≫ Stm32f070f6 Firmware Version-
   St ≫ Stm32f070f6 Version-
St ≫ Stm32f070rb Firmware Version-
   St ≫ Stm32f070rb Version-
St ≫ Stm32f071c8 Firmware Version-
   St ≫ Stm32f071c8 Version-
St ≫ Stm32f071cb Firmware Version-
   St ≫ Stm32f071cb Version-
St ≫ Stm32f051t8 Firmware Version-
   St ≫ Stm32f051t8 Version-
St ≫ Stm32f058c8 Firmware Version-
   St ≫ Stm32f058c8 Version-
St ≫ Stm32f058r8 Firmware Version-
   St ≫ Stm32f058r8 Version-
St ≫ Stm32f058t8 Firmware Version-
   St ≫ Stm32f058t8 Version-
St ≫ Stm32f070c6 Firmware Version-
   St ≫ Stm32f070c6 Version-
St ≫ Stm32f051k4 Firmware Version-
   St ≫ Stm32f051k4 Version-
St ≫ Stm32f051k6 Firmware Version-
   St ≫ Stm32f051k6 Version-
St ≫ Stm32f051k8 Firmware Version-
   St ≫ Stm32f051k8 Version-
St ≫ Stm32f051r4 Firmware Version-
   St ≫ Stm32f051r4 Version-
St ≫ Stm32f051r6 Firmware Version-
   St ≫ Stm32f051r6 Version-
St ≫ Stm32f051r8 Firmware Version-
   St ≫ Stm32f051r8 Version-
St ≫ Stm32f042t6 Firmware Version-
   St ≫ Stm32f042t6 Version-
St ≫ Stm32f048c6 Firmware Version-
   St ≫ Stm32f048c6 Version-
St ≫ Stm32f048g6 Firmware Version-
   St ≫ Stm32f048g6 Version-
St ≫ Stm32f048t6 Firmware Version-
   St ≫ Stm32f048t6 Version-
St ≫ Stm32f051c4 Firmware Version-
   St ≫ Stm32f051c4 Version-
St ≫ Stm32f051c6 Firmware Version-
   St ≫ Stm32f051c6 Version-
St ≫ Stm32f051c8 Firmware Version-
   St ≫ Stm32f051c8 Version-
St ≫ Stm32f042f4 Firmware Version-
   St ≫ Stm32f042f4 Version-
St ≫ Stm32f042f6 Firmware Version-
   St ≫ Stm32f042f6 Version-
St ≫ Stm32f042g4 Firmware Version-
   St ≫ Stm32f042g4 Version-
St ≫ Stm32f042g6 Firmware Version-
   St ≫ Stm32f042g6 Version-
St ≫ Stm32f042k4 Firmware Version-
   St ≫ Stm32f042k4 Version-
St ≫ Stm32f042k6 Firmware Version-
   St ≫ Stm32f042k6 Version-
St ≫ Stm32f038c6 Firmware Version-
   St ≫ Stm32f038c6 Version-
St ≫ Stm32f038e6 Firmware Version-
   St ≫ Stm32f038e6 Version-
St ≫ Stm32f038f6 Firmware Version-
   St ≫ Stm32f038f6 Version-
St ≫ Stm32f038g6 Firmware Version-
   St ≫ Stm32f038g6 Version-
St ≫ Stm32f038k6 Firmware Version-
   St ≫ Stm32f038k6 Version-
St ≫ Stm32f042c4 Firmware Version-
   St ≫ Stm32f042c4 Version-
St ≫ Stm32f042c6 Firmware Version-
   St ≫ Stm32f042c6 Version-
St ≫ Stm32f031e6 Firmware Version-
   St ≫ Stm32f031e6 Version-
St ≫ Stm32f031f4 Firmware Version-
   St ≫ Stm32f031f4 Version-
St ≫ Stm32f031f6 Firmware Version-
   St ≫ Stm32f031f6 Version-
St ≫ Stm32f031g4 Firmware Version-
   St ≫ Stm32f031g4 Version-
St ≫ Stm32f031g6 Firmware Version-
   St ≫ Stm32f031g6 Version-
St ≫ Stm32f031k4 Firmware Version-
   St ≫ Stm32f031k4 Version-
St ≫ Stm32f030f4 Firmware Version-
   St ≫ Stm32f030f4 Version-
St ≫ Stm32f030k6 Firmware Version-
   St ≫ Stm32f030k6 Version-
St ≫ Stm32f030r8 Firmware Version-
   St ≫ Stm32f030r8 Version-
St ≫ Stm32f030rc Firmware Version-
   St ≫ Stm32f030rc Version-
St ≫ Stm32f031c4 Firmware Version-
   St ≫ Stm32f031c4 Version-
St ≫ Stm32f031c6 Firmware Version-
   St ≫ Stm32f031c6 Version-
St ≫ Stm32f030c6 Firmware Version-
   St ≫ Stm32f030c6 Version-
St ≫ Stm32f030c8 Firmware Version-
   St ≫ Stm32f030c8 Version-
St ≫ Stm32f030cc Firmware Version-
   St ≫ Stm32f030cc Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.198
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.