CVE-2020-27212

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-27212
STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://eprint.iacr.org/2021/640 Third Party Advisory
https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html Third Party Advisory
https://www.aisec.fraunhofer.de/en/FirmwareProtection.html Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:st:stm32cubel4_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:st:stm32l412c8:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412cb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412k8:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412kb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412r8:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412rb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412t8:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l412tb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l422cb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l422kb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l422rb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l422tb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431cb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431cc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431kb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431kc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431rb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l431vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l432kb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l432kc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l433cb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l433cc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l433rb:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l433rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l433vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l442kc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l443cc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l443rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l443vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451cc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451ce:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l451ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452cc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452ce:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l452ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l462ce:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l462re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l462ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471qe:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471qg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471ze:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l471zg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l475vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476je:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476jg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476me:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476mg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476qe:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476qg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476rc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476vc:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476ze:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l476zg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l486jg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l486qg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l486rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l486vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l486zg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496ae:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496ag:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496qe:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496qg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496re:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496ve:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496wg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496ze:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l496zg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l4a6ag:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l4a6qg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l4a6rg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l4a6vg:-:*:*:*:*:*:*:*
cpe:2.3:h:st:stm32l4a6zg:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2021-05-21 12:15

Updated : 2024-02-28 18:28

NVD link : CVE-2020-27212

Mitre link : CVE-2020-27212

CVE.ORG link : CVE-2020-27212

JSON object : View

Products Affected

st

  • stm32l471qe
  • stm32l486jg
  • stm32l443vc
  • stm32l443rc
  • stm32l451ce
  • stm32l496re
  • stm32l451ve
  • stm32l496zg
  • stm32l476qg
  • stm32l452vc
  • stm32l451cc
  • stm32l433vc
  • stm32l471ze
  • stm32l422tb
  • stm32l4a6zg
  • stm32l486qg
  • stm32l471zg
  • stm32l412c8
  • stm32l422kb
  • stm32l432kb
  • stm32l476qe
  • stm32l431kc
  • stm32l462re
  • stm32l471re
  • stm32l412tb
  • stm32l496qe
  • stm32l4a6vg
  • stm32l496ag
  • stm32l4a6qg
  • stm32l476me
  • stm32l475re
  • stm32l475ve
  • stm32l433cc
  • stm32l496wg
  • stm32l412r8
  • stm32l422rb
  • stm32l451vc
  • stm32l471vg
  • stm32l452re
  • stm32l431cb
  • stm32l451rc
  • stm32l496ze
  • stm32l471ve
  • stm32l443cc
  • stm32l475rg
  • stm32l412t8
  • stm32l475vg
  • stm32l412cb
  • stm32l475rc
  • stm32l412k8
  • stm32l431rb
  • stm32l4a6rg
  • stm32l486rg
  • stm32l476rg
  • stm32l486zg
  • stm32l476rc
  • stm32l412rb
  • stm32l422cb
  • stm32l442kc
  • stm32l476ve
  • stm32l476zg
  • stm32l476jg
  • stm32l4a6ag
  • stm32l476je
  • stm32l452ve
  • stm32l476re
  • stm32l475vc
  • stm32cubel4_firmware
  • stm32l496qg
  • stm32l431vc
  • stm32l452rc
  • stm32l431rc
  • stm32l486vg
  • stm32l476vg
  • stm32l452cc
  • stm32l433rc
  • stm32l451re
  • stm32l433rb
  • stm32l496vg
  • stm32l496ae
  • stm32l431kb
  • stm32l476mg
  • stm32l432kc
  • stm32l452ce
  • stm32l476ze
  • stm32l471rg
  • stm32l496rg
  • stm32l412kb
  • stm32l433cb
  • stm32l431cc
  • stm32l462ve
  • stm32l471qg
  • stm32l496ve
  • stm32l476vc
  • stm32l462ce
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024