NetSight
IP …
medium4.6

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firm…

Impact

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

Affected products

VendorProductAffected versions
StStm32f071rb Firmware
All versions
StStm32f071v8 Firmware
All versions
StStm32f071vb Firmware
All versions
StStm32f072c8 Firmware
All versions
StStm32f072cb Firmware
All versions
StStm32f072r8 Firmware
All versions
StStm32f072rb Firmware
All versions
StStm32f072v8 Firmware
All versions
StStm32f072vb Firmware
All versions
StStm32f078cb Firmware
All versions
StStm32f078rb Firmware
All versions
StStm32f078vb Firmware
All versions

Weakness classification

CWE-362

References