Stmicroelectronics Schwachstellen

Zeitverlauf

Typ

Not Defined17
Middleware1

Produkt

STMicroelectronics STM32Cube6
STMicroelectronics STM32L43
STMicroelectronics STSAFE-J2
STMicroelectronics J-SAFE32
STMicroelectronics J-SIGN2

Massnahmen

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined15

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Zugriffsart

Not Defined0
Physical4
Local1
Adjacent9
Network4

Authentisierung

Not Defined0
High0
Low12
None6

Benutzeraktivität

Not Defined0
Required0
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤43
≤54
≤64
≤72
≤83
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤43
≤54
≤64
≤72
≤83
≤90
≤100

VulDB

≤10
≤20
≤33
≤44
≤53
≤65
≤71
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤61
≤73
≤82
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k8
<2k4
<5k5
<10k0
<25k1
<50k0
<100k0
≥100k0

Exploit heute

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (16): BLE Stack (1), J-SAFE3 (2), J-SIGN (2), ST33TPHF2ESPI TPM (1), STM32Cube (6), STM32F0 (1), STM32F1 (1), STM32F4 (1), STM32F7 (2), STM32F103 (1), STM32H7 (1), STM32L0 (1), STM32L1 (1), STM32L4 (3), STSAFE-A1xx Middleware (1), STSAFE-J (2)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
01.01.20246.56.4STMicroelectronics STSAFE-A1xx Middleware I2C Bus StSafeA_ReceiveBytes PufferüberlaufMiddlewareNot DefinedOfficial Fix0.000550.05CVE-2023-50096
04.03.20224.64.6STMicroelectronics STSAFE-J/J-SAFE3/J-SIGN Java Card API schwache AuthentisierungUnbekanntNot DefinedNot Defined0.000550.00CVE-2021-43393
04.03.20222.62.6STMicroelectronics STSAFE-J/J-SAFE3/J-SIGN Java Card API Information DisclosureUnbekanntNot DefinedNot Defined0.000640.00CVE-2021-43392
23.07.20213.53.5STMicroelectronics STM32Cube USB Device Packet USBH_ParseDevDesc Denial of ServiceUnbekanntNot DefinedNot Defined0.000580.02CVE-2021-34268
23.07.20213.53.5STMicroelectronics STM32Cube USBH_MSC_InterfaceInit Denial of ServiceUnbekanntNot DefinedNot Defined0.000580.00CVE-2021-34267
23.07.20215.55.5STMicroelectronics STM32Cube USBH_ParseEPDesc PufferüberlaufUnbekanntNot DefinedNot Defined0.000970.00CVE-2021-34262
23.07.20215.55.5STMicroelectronics STM32Cube USBH_ParseInterfaceDesc PufferüberlaufUnbekanntNot DefinedNot Defined0.000970.00CVE-2021-34260
23.07.20215.55.3STMicroelectronics STM32Cube USBH_ParseCfgDesc PufferüberlaufUnbekanntNot DefinedOfficial Fix0.000970.00CVE-2021-34259
23.07.20216.56.5STMicroelectronics STM32Cube Remote Wake-Up USBH_ParseCfgDesc Denial of ServiceUnbekanntNot DefinedNot Defined0.000580.00CVE-2021-34261
21.05.20213.83.8STMicroelectronics STM32L4 erweiterte RechteUnbekanntNot DefinedNot Defined0.000770.00CVE-2021-29414

8 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

◂ ZurückÜbersichtWeiter ▸

Do you know our Splunk app?

Download it now for free!