Stm32Cubel4 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Stm32Cubel4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-29414ststm32cubel4_firmware
EPSS score
0.34%
STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.5.9CVE-2020-20949ietfpublic_key_cryptography_standards_\#1+20
EPSS score
0.94%
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.7CVE-2020-27212ststm32cubel4_firmware
EPSS score
0.34%
STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.