Stmicroelectronics Vulnerabilidad

Cronología

Escribe

Not Defined17
Middleware1

Producto

STMicroelectronics STM32Cube6
STMicroelectronics STM32L43
STMicroelectronics STSAFE-J2
STMicroelectronics J-SAFE32
STMicroelectronics J-SIGN2

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined15

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Vector de acceso

Not Defined0
Physical4
Local1
Adjacent9
Network4

Autenticación

Not Defined0
High0
Low12
None6

La interacción del usuario

Not Defined0
Required0
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤43
≤54
≤64
≤72
≤83
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤43
≤54
≤64
≤72
≤83
≤90
≤100

VulDB

≤10
≤20
≤33
≤44
≤53
≤65
≤71
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤61
≤73
≤82
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k8
<2k4
<5k5
<10k0
<25k1
<50k0
<100k0
≥100k0

Explotar hoy

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (16): BLE Stack (1), J-SAFE3 (2), J-SIGN (2), ST33TPHF2ESPI TPM (1), STM32Cube (6), STM32F0 (1), STM32F1 (1), STM32F4 (1), STM32F7 (2), STM32F103 (1), STM32H7 (1), STM32L0 (1), STM32L1 (1), STM32L4 (3), STSAFE-A1xx Middleware (1), STSAFE-J (2)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-01-016.56.4STMicroelectronics STSAFE-A1xx Middleware I2C Bus StSafeA_ReceiveBytes desbordamiento de búferMiddlewareNot DefinedOfficial Fix0.000550.05CVE-2023-50096
2022-03-044.64.6STMicroelectronics STSAFE-J/J-SAFE3/J-SIGN Java Card API autenticación débilDesconocidoNot DefinedNot Defined0.000550.00CVE-2021-43393
2022-03-042.62.6STMicroelectronics STSAFE-J/J-SAFE3/J-SIGN Java Card API divulgación de informaciónDesconocidoNot DefinedNot Defined0.000640.00CVE-2021-43392
2021-07-233.53.5STMicroelectronics STM32Cube USB Device Packet USBH_ParseDevDesc denegación de servicioDesconocidoNot DefinedNot Defined0.000580.02CVE-2021-34268
2021-07-233.53.5STMicroelectronics STM32Cube USBH_MSC_InterfaceInit denegación de servicioDesconocidoNot DefinedNot Defined0.000580.00CVE-2021-34267
2021-07-235.55.5STMicroelectronics STM32Cube USBH_ParseEPDesc desbordamiento de búferDesconocidoNot DefinedNot Defined0.000970.00CVE-2021-34262
2021-07-235.55.5STMicroelectronics STM32Cube USBH_ParseInterfaceDesc desbordamiento de búferDesconocidoNot DefinedNot Defined0.000970.00CVE-2021-34260
2021-07-235.55.3STMicroelectronics STM32Cube USBH_ParseCfgDesc desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.000970.00CVE-2021-34259
2021-07-236.56.5STMicroelectronics STM32Cube Remote Wake-Up USBH_ParseCfgDesc denegación de servicioDesconocidoNot DefinedNot Defined0.000580.00CVE-2021-34261
2021-05-213.83.8STMicroelectronics STM32L4 escalada de privilegiosDesconocidoNot DefinedNot Defined0.000770.00CVE-2021-29414

8 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!