CVE-2017-18347 (GCVE-0-2017-18347)

Vulnerability from cvelistv5 – Published: 2018-09-12 15:00 – Updated: 2024-09-17 01:36
VLAI
Summary
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.
Severity
4.6 (Medium)
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:20:51.067Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device\u0027s protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-12T15:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18347",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device\u0027s protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32",
              "refsource": "MISC",
              "url": "https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32"
            },
            {
              "name": "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier",
              "refsource": "MISC",
              "url": "https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier"
            },
            {
              "name": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html",
              "refsource": "MISC",
              "url": "https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18347",
    "datePublished": "2018-09-12T15:00:00.000Z",
    "dateReserved": "2018-09-12T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:36:16.947Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-18347",
      "date": "2026-07-23",
      "epss": "0.004",
      "percentile": "0.32599"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-18347\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2018-09-12T15:29:00.233\",\"lastModified\":\"2024-11-21T03:19:53.833\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device\u0027s protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.\"},{\"lang\":\"es\",\"value\":\"Control de acceso incorrecto en RDP Level 1 en productos STMicroelectronics, serie STM32F0, permite que atacantes f\u00edsicamente presentes extraigan el firmware protegido del dispositivo mediante una secuencia especial de comandos SWD (Serial Wire Debug) debido a que hay una condici\u00f3n de carrera entre la inicializaci\u00f3n completa de la interfaz SWD y la instalaci\u00f3n de la protecci\u00f3n flash.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":4.9,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.9,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f071rb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5509D8A9-90F1-4A8B-8609-DC7254130070\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f071rb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB3C2FB2-6308-45E3-831E-B2F779A886E1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f071v8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CC1010B-3D2D-405B-9FAF-98F37CA4D510\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f071v8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05D5341B-1D44-44C6-8FA7-05BF066C052B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f071vb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B9997D6-D64D-4BA7-B127-20B00A13E63A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f071vb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACD473E0-5E09-4726-A6A3-6715E5945947\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072c8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EF3EB0E-8C87-4894-A307-5177E0458739\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072c8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F655B8F1-B21E-476A-908D-EBA16E4D7B8D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072cb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6FE3842-9E90-4BBE-B14E-51C68CF6B04C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072cb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CBFC44D-586E-4B08-90AF-9075B969DDDD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072r8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66FF7F8F-DD22-440E-84BB-334035942D2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072r8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DAA5EB5-0464-4935-BB49-FDD2794DB324\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072rb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86D47F34-47E8-4AF2-957A-4938787FF0B7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072rb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E1EBA26-B15E-4D52-AD68-AA39BA0BED6B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072v8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E04A9CA0-C3DD-42A0-B837-ACEF1474B876\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072v8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1D50185-E096-4196-A8F6-3F6DE4A88A07\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f072vb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75BC9541-A6F8-4C7C-8928-B9E6616C6981\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f072vb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B4D7C2E-0694-4009-B044-5F19E20D26AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f078cb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE3C19F5-A323-4A21-A5B0-7E9C44F175CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f078cb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DC45637-2870-483A-A0D6-F5EE3ECE8129\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f078rb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A309559-E88B-4485-A727-E09722471311\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f078rb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBDDC99E-81C6-4371-AD36-8DDD74E1FF11\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f078vb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A1C652E-0587-4023-AB80-E8E1C5DFDBE7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f078vb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78CB03A2-FBE8-4092-B96B-530D55E38F5D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091cb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D9BEF33-5012-4851-BB32-7317E76364DA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091cb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3854C570-5D65-4185-9FE4-3C0E3FCFC928\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091cc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07279D5B-7190-47F9-A2F1-B15049172412\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091cc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83ED0B1F-3831-428B-95B2-2DB7F1557977\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091rb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEAE2F6B-707D-4619-B8F8-3CEB8CAB28D7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091rb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEF7DB68-02A2-4A33-9C7F-5538643D9D63\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091rc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"163232DF-E010-4D70-8C5E-247C65975C57\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091rc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"403C1FAC-E503-4748-ACF9-09B4E49FDDDD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091vb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CE64EBE-6325-4586-BA67-344E7AC8189F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091vb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94FC942C-0D48-46AE-8985-57F73C268C7C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f091vc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FAFE18D1-C7F5-4CA2-B007-DC3069896E80\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f091vc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DA685A2-86CE-4AB0-9E88-84B50E1CEB9D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f098cc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B84C56E7-3F4D-412C-B6B3-FBA7059A6C82\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f098cc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF6CDF39-5239-40A0-9C56-EAC9D4318A1C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f098rc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DAB99B0-E616-4F04-AFC8-1FDC18D6A2E8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f098rc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9851C88C-D3DE-4F74-816D-304D975966BE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f098vc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"881FDD55-1BDF-4978-A393-D842CB41A322\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f098vc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0DDD12F-1DA2-4D0C-A40D-EC1B1A376A7F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f070c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E778F9F-7A39-4FE7-8AF6-2558F9587859\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f070c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A682E34-56CA-4AEB-88F2-C2250DB96B97\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f070cb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DF2D955-2A57-4D95-AA25-E6436CE26097\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f070cb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32EF334F-3F94-4F62-B75C-8E4C0424E7EF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f070f6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6F0583F-8E73-409E-9400-05307EB486C5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f070f6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51CFF601-FAA4-4311-8735-723EA6DFE843\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f070rb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6DA1F05-F3D1-4FDF-AB94-A36717776C71\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f070rb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2B7B4B9-7F40-4186-9BA7-003891222286\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f071c8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49F420D3-0E17-4AD5-A600-FAD2688CD82E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f071c8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF8445AD-0008-4A76-B40E-68BDE9AEBDAA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f071cb_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC047AC5-29F6-4C30-A203-32F6050F8055\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f071cb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"895177EE-48AF-4AF9-BF4F-EA4C70D2C915\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051t8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A511A9BF-C9DA-457F-B23F-86B754C39F05\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051t8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3BC3D27-3200-42BE-8328-C800C36352A4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f058c8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED7706AA-9A60-4581-9575-32E0A071902E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f058c8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12A88BFC-2EBD-494A-9161-912AF9BC5C86\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f058r8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA6CC26D-B49A-4D8A-A382-F8518A810B3D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f058r8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D39C1E1-D37C-4335-A740-8C3323ECBB48\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f058t8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8605528E-18BC-42C9-BBFB-213F23E08FA6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f058t8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEDDC0B6-91CB-489F-A610-716707E87C31\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f070c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E778F9F-7A39-4FE7-8AF6-2558F9587859\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f070c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A682E34-56CA-4AEB-88F2-C2250DB96B97\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051k4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4C5BCB9-9784-428E-A0AB-7FF8185D2DDE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051k4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4176235-C90E-44F4-933E-F26BCFC4E76B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051k6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D4510C5-5F95-4DC3-BE91-9B1B5B8EBF20\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051k6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F4DF827-1BAC-4A47-BE20-0BEE66D97AA7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051k8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40792AAC-0582-4DFA-BE9A-1C8CFE1B2F45\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051k8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5D3E77C-1F07-4262-82DF-BE1FD9696B8B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051r4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"012DBF7D-8560-4A1A-A08A-097BC865925B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051r4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EECDEF9-5DB6-4950-B73F-F43D66995F59\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051r6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70615138-87BD-4E9F-9960-9F26BB61F1AE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051r6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83518586-7B47-4835-A73E-1110AED734A8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051r8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"010E5741-22C1-418B-996F-83C16C3ABAB4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051r8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4925C5F7-5334-4677-B81C-A9DDF9336467\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042t6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8E90EB1-31B5-4359-96A8-F3EE10CB0F5C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042t6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7123ECA-1D0A-49B0-84DB-6E3E98FC8919\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f048c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F797567B-0D2C-447F-AF01-7F6685DF5561\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f048c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"193CE88D-7759-410E-83A6-24FE7F68D7EF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f048g6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A16A88B-0A46-485F-9A67-D15013A6A6E3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f048g6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AB0E481-45F2-40DD-A624-F6CBBCFC5529\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f048t6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34563948-F5AD-49ED-B630-68406256F779\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f048t6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5CBB866-B901-43D2-8DE9-39282F783563\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051c4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F374F62-79A3-49D8-8B07-6EE13622E05A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051c4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F38061A-F47E-498B-819C-65949A76E559\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C479195-140D-41BF-917C-7A88D13A4C74\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B910D47-DB2F-4D13-8761-1E8A202A11ED\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f051c8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF28B8A7-42B8-4908-BE62-E91B29E4227B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f051c8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42997AF8-4E4A-42E4-8178-783C8942263D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042f4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4411447F-DB71-4CDF-8F18-2708B1038855\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042f4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0921456A-F7FF-4DD8-A3A6-F9C2B946838C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042f6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"67BB7054-E3D4-4F37-A49E-76430B1DDC63\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042f6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BC05830-A76B-46C6-983E-A0DE922EEAA9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042g4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFCA9D71-F2D7-4E4D-B180-C0273FF5F56E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B94DEAA6-78DA-41D9-A125-F471B85FA9AF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042g6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B32A470E-F8CD-4D1A-B9F6-36352DE8D35A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042g6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B43690C-1EA8-4A2E-93AB-E0A7FBE76BCC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042k4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A66BF697-B6AE-4402-BBD9-EA4F0E0B747B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042k4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47F3B325-997A-4A7B-900B-1D4A4FA7C35A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042k6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C25A621-4ED2-4174-9589-D1A9CBC85F83\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042k6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23504ADB-4452-490F-A144-8CCDE569CA3F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f038c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC75636D-7D37-41C9-BE1C-7DE0C3F70791\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f038c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C850D66F-CA4B-4078-A5C4-8A343710ADE1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f038e6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0D21D5D-3624-4054-979E-154948C9D388\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f038e6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D431AC60-716A-4CC5-85AE-3BE7B3A421BE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f038f6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B53F48D4-0A3B-401B-9DCE-9395679F97DE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f038f6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3900982A-06EB-4F2F-A91D-D414622A0B7A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f038g6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3015D28B-A4BD-4AC2-8A7B-175B543FF320\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f038g6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E51E6B85-BE97-4365-86D9-DE106001DF43\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f038k6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88C9E10C-3D51-4F06-BD4B-80D548FCABD2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f038k6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A7A3BCB-F1F3-44AA-933A-598B611FD060\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042c4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B547890C-16CD-4121-AA09-A83B88E7D4C7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042c4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6336D349-E7CF-451B-A085-EC9E1F1458B7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f042c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38EB0E21-6508-44D8-93EA-FB6FFBBCC0B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f042c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC8344E3-524F-40C0-8884-FFA3C600BC24\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031e6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53E3C923-8112-44A1-9F11-0C081BDFBDD2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031e6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D62CA7EA-D2AB-4C62-8FAC-5E157A58C294\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031f4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50520E1E-CFBB-4A17-B62E-17617B3F6788\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031f4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFD1DDDF-4B45-434B-B2AD-1E688ACD5069\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031f6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFBCF6E9-CDC2-413A-81F0-877F61BF37B7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031f6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84D40595-F301-4645-9091-C8F8BC8CB97C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031g4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96ED0959-0E85-4805-9CB1-B5BC0B2A25D2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031g4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99770A7-F301-48A8-B1D0-6B9DDF1549E8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031g6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"869D5ED7-1479-4DC9-B1D5-52058A6F15ED\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031g6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4C4407E-9995-4186-B435-11336911A46A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031k4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40D18840-D242-4CBD-9073-3F64EEBF897A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031k4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"928FEDDD-B9BA-4BC0-8F27-537A2ED31A76\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030f4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04F615CF-68A8-4487-AAE9-606EA4635CB7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030f4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D382F295-975E-4885-8EF8-3D35C8C65BDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030k6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70CE9EC3-EB61-4900-9D65-C36A03DD7C46\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030k6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07495388-69B7-42AA-8846-5EF1C6F47BB8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030r8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"409CFEF6-77B6-4371-9C77-683B9501D943\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030r8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A59F1F0-B3ED-4E8F-9425-FD7FAC1A6D44\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030rc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6E61C78-E402-4B4C-B518-837C88DD134B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030rc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ADE7E38-8E24-458A-8590-4325693DD828\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031c4_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2841FB0-3E44-441E-BF90-C330058D981F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031c4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1D84B76-6CF4-46D7-9A93-BDD4685A4E84\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f031c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD7D523C-5970-4F36-BA69-E9717F16B673\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f031c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F8F3ED0-4779-45FD-9B9A-0A3C931F47B8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030c6_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12A8E329-27BB-4B97-BEE2-A5A5F32914CF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030c6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66CED26B-188C-4A83-A3D8-DC149F4A4A9D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030c8_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E6788A3-DFA0-46EE-ADB3-53A6DAD7F353\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030c8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"509F7642-7B18-48B2-B478-324E898EB76C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:st:stm32f030cc_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F492A485-3389-4C42-B53D-DFF92EA6553D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:st:stm32f030cc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54184704-1385-40C7-90E5-8F41E49B401F\"}]}]}],\"references\":[{\"url\":\"https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.aisec.fraunhofer.de/en/FirmwareProtection.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.aisec.fraunhofer.de/en/FirmwareProtection.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.