{"schemaVersion":3,"id":"CVE-2017-18347","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.","dates":{"published":"2018-09-12T15:00:00.000Z","modified":"2024-09-17T01:36:16.947Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.9,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.6,"severity":"medium","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.9,"severity":"medium","vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.004,"percentile":0.32786,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.004},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.004,"percentile":0.32786}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.004,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.004,"percentile":0.32786}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_E828CD1FFF6CC75C","name":"Exploit Reference (usenix.org)","source":"reference","url":"https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_FADCE31679FB8AA6","name":"Exploit Reference (aisec.fraunhofer.de)","source":"reference","url":"https://www.aisec.fraunhofer.de/en/FirmwareProtection.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","description":"The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/362.html"}],"affected":[{"vendor":"st","product":"stm32f030c6_firmware","name":"stm32f030c6 firmware","label":"stm32f030c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030c6"},{"vendor":"st","product":"stm32f030c8_firmware","name":"stm32f030c8 firmware","label":"stm32f030c8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030c8"},{"vendor":"st","product":"stm32f030cc_firmware","name":"stm32f030cc firmware","label":"stm32f030cc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030cc"},{"vendor":"st","product":"stm32f030f4_firmware","name":"stm32f030f4 firmware","label":"stm32f030f4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030f4"},{"vendor":"st","product":"stm32f030k6_firmware","name":"stm32f030k6 firmware","label":"stm32f030k6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030k6"},{"vendor":"st","product":"stm32f030r8_firmware","name":"stm32f030r8 firmware","label":"stm32f030r8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030r8"},{"vendor":"st","product":"stm32f030rc_firmware","name":"stm32f030rc firmware","label":"stm32f030rc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f030rc"},{"vendor":"st","product":"stm32f031c4_firmware","name":"stm32f031c4 firmware","label":"stm32f031c4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031c4"},{"vendor":"st","product":"stm32f031c6_firmware","name":"stm32f031c6 firmware","label":"stm32f031c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031c6"},{"vendor":"st","product":"stm32f031e6_firmware","name":"stm32f031e6 firmware","label":"stm32f031e6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031e6"},{"vendor":"st","product":"stm32f031f4_firmware","name":"stm32f031f4 firmware","label":"stm32f031f4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031f4"},{"vendor":"st","product":"stm32f031f6_firmware","name":"stm32f031f6 firmware","label":"stm32f031f6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031f6"},{"vendor":"st","product":"stm32f031g4_firmware","name":"stm32f031g4 firmware","label":"stm32f031g4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031g4"},{"vendor":"st","product":"stm32f031g6_firmware","name":"stm32f031g6 firmware","label":"stm32f031g6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031g6"},{"vendor":"st","product":"stm32f031k4_firmware","name":"stm32f031k4 firmware","label":"stm32f031k4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f031k4"},{"vendor":"st","product":"stm32f038c6_firmware","name":"stm32f038c6 firmware","label":"stm32f038c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f038c6"},{"vendor":"st","product":"stm32f038e6_firmware","name":"stm32f038e6 firmware","label":"stm32f038e6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f038e6"},{"vendor":"st","product":"stm32f038f6_firmware","name":"stm32f038f6 firmware","label":"stm32f038f6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f038f6"},{"vendor":"st","product":"stm32f038g6_firmware","name":"stm32f038g6 firmware","label":"stm32f038g6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f038g6"},{"vendor":"st","product":"stm32f038k6_firmware","name":"stm32f038k6 firmware","label":"stm32f038k6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f038k6"},{"vendor":"st","product":"stm32f042c4_firmware","name":"stm32f042c4 firmware","label":"stm32f042c4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042c4"},{"vendor":"st","product":"stm32f042c6_firmware","name":"stm32f042c6 firmware","label":"stm32f042c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042c6"},{"vendor":"st","product":"stm32f042f4_firmware","name":"stm32f042f4 firmware","label":"stm32f042f4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042f4"},{"vendor":"st","product":"stm32f042f6_firmware","name":"stm32f042f6 firmware","label":"stm32f042f6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042f6"},{"vendor":"st","product":"stm32f042g4_firmware","name":"stm32f042g4 firmware","label":"stm32f042g4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042g4"},{"vendor":"st","product":"stm32f042g6_firmware","name":"stm32f042g6 firmware","label":"stm32f042g6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042g6"},{"vendor":"st","product":"stm32f042k4_firmware","name":"stm32f042k4 firmware","label":"stm32f042k4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042k4"},{"vendor":"st","product":"stm32f042k6_firmware","name":"stm32f042k6 firmware","label":"stm32f042k6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042k6"},{"vendor":"st","product":"stm32f042t6_firmware","name":"stm32f042t6 firmware","label":"stm32f042t6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f042t6"},{"vendor":"st","product":"stm32f048c6_firmware","name":"stm32f048c6 firmware","label":"stm32f048c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f048c6"},{"vendor":"st","product":"stm32f048g6_firmware","name":"stm32f048g6 firmware","label":"stm32f048g6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f048g6"},{"vendor":"st","product":"stm32f048t6_firmware","name":"stm32f048t6 firmware","label":"stm32f048t6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f048t6"},{"vendor":"st","product":"stm32f051c4_firmware","name":"stm32f051c4 firmware","label":"stm32f051c4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051c4"},{"vendor":"st","product":"stm32f051c6_firmware","name":"stm32f051c6 firmware","label":"stm32f051c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051c6"},{"vendor":"st","product":"stm32f051c8_firmware","name":"stm32f051c8 firmware","label":"stm32f051c8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051c8"},{"vendor":"st","product":"stm32f051k4_firmware","name":"stm32f051k4 firmware","label":"stm32f051k4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051k4"},{"vendor":"st","product":"stm32f051k6_firmware","name":"stm32f051k6 firmware","label":"stm32f051k6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051k6"},{"vendor":"st","product":"stm32f051k8_firmware","name":"stm32f051k8 firmware","label":"stm32f051k8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051k8"},{"vendor":"st","product":"stm32f051r4_firmware","name":"stm32f051r4 firmware","label":"stm32f051r4_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051r4"},{"vendor":"st","product":"stm32f051r6_firmware","name":"stm32f051r6 firmware","label":"stm32f051r6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051r6"},{"vendor":"st","product":"stm32f051r8_firmware","name":"stm32f051r8 firmware","label":"stm32f051r8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051r8"},{"vendor":"st","product":"stm32f051t8_firmware","name":"stm32f051t8 firmware","label":"stm32f051t8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f051t8"},{"vendor":"st","product":"stm32f058c8_firmware","name":"stm32f058c8 firmware","label":"stm32f058c8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f058c8"},{"vendor":"st","product":"stm32f058r8_firmware","name":"stm32f058r8 firmware","label":"stm32f058r8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f058r8"},{"vendor":"st","product":"stm32f058t8_firmware","name":"stm32f058t8 firmware","label":"stm32f058t8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f058t8"},{"vendor":"st","product":"stm32f070c6_firmware","name":"stm32f070c6 firmware","label":"stm32f070c6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f070c6"},{"vendor":"st","product":"stm32f070cb_firmware","name":"stm32f070cb firmware","label":"stm32f070cb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f070cb"},{"vendor":"st","product":"stm32f070f6_firmware","name":"stm32f070f6 firmware","label":"stm32f070f6_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f070f6"},{"vendor":"st","product":"stm32f070rb_firmware","name":"stm32f070rb firmware","label":"stm32f070rb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f070rb"},{"vendor":"st","product":"stm32f071c8_firmware","name":"stm32f071c8 firmware","label":"stm32f071c8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f071c8"},{"vendor":"st","product":"stm32f071cb_firmware","name":"stm32f071cb firmware","label":"stm32f071cb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f071cb"},{"vendor":"st","product":"stm32f071rb_firmware","name":"stm32f071rb firmware","label":"stm32f071rb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f071rb"},{"vendor":"st","product":"stm32f071v8_firmware","name":"stm32f071v8 firmware","label":"stm32f071v8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f071v8"},{"vendor":"st","product":"stm32f071vb_firmware","name":"stm32f071vb firmware","label":"stm32f071vb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f071vb"},{"vendor":"st","product":"stm32f072c8_firmware","name":"stm32f072c8 firmware","label":"stm32f072c8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072c8"},{"vendor":"st","product":"stm32f072cb_firmware","name":"stm32f072cb firmware","label":"stm32f072cb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072cb"},{"vendor":"st","product":"stm32f072r8_firmware","name":"stm32f072r8 firmware","label":"stm32f072r8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072r8"},{"vendor":"st","product":"stm32f072rb_firmware","name":"stm32f072rb firmware","label":"stm32f072rb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072rb"},{"vendor":"st","product":"stm32f072v8_firmware","name":"stm32f072v8 firmware","label":"stm32f072v8_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072v8"},{"vendor":"st","product":"stm32f072vb_firmware","name":"stm32f072vb firmware","label":"stm32f072vb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f072vb"},{"vendor":"st","product":"stm32f078cb_firmware","name":"stm32f078cb firmware","label":"stm32f078cb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f078cb"},{"vendor":"st","product":"stm32f078rb_firmware","name":"stm32f078rb firmware","label":"stm32f078rb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f078rb"},{"vendor":"st","product":"stm32f078vb_firmware","name":"stm32f078vb firmware","label":"stm32f078vb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f078vb"},{"vendor":"st","product":"stm32f091cb_firmware","name":"stm32f091cb firmware","label":"stm32f091cb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091cb"},{"vendor":"st","product":"stm32f091cc_firmware","name":"stm32f091cc firmware","label":"stm32f091cc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091cc"},{"vendor":"st","product":"stm32f091rb_firmware","name":"stm32f091rb firmware","label":"stm32f091rb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091rb"},{"vendor":"st","product":"stm32f091rc_firmware","name":"stm32f091rc firmware","label":"stm32f091rc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091rc"},{"vendor":"st","product":"stm32f091vb_firmware","name":"stm32f091vb firmware","label":"stm32f091vb_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091vb"},{"vendor":"st","product":"stm32f091vc_firmware","name":"stm32f091vc firmware","label":"stm32f091vc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f091vc"},{"vendor":"st","product":"stm32f098cc_firmware","name":"stm32f098cc firmware","label":"stm32f098cc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f098cc"},{"vendor":"st","product":"stm32f098rc_firmware","name":"stm32f098rc firmware","label":"stm32f098rc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f098rc"},{"vendor":"st","product":"stm32f098vc_firmware","name":"stm32f098vc firmware","label":"stm32f098vc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/st/stm32f098vc"}],"affectedCount":72,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32","label":"community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32","hostname":"community.st.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier","label":"www.usenix.org/conference/woot17/workshop-program/presentation/obermaier","hostname":"www.usenix.org","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.aisec.fraunhofer.de/en/FirmwareProtection.html","label":"www.aisec.fraunhofer.de/en/FirmwareProtection.html","hostname":"www.aisec.fraunhofer.de","tags":["X Refsource MISC","Exploit","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-09-12T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T01:36:16.947Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:17:42.682Z","stale":false,"partial":false}}