MEDIUM🇵🇱 Wersja polska

CVE-2020-11683

CVSS 6.8v3.1pub. 2020-09-14upd. 2024-11-21

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Linux4sam At91bootstrap

    APP
    Linux4Sam
    3.7.2 – 3.9.2 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-11684CRITICAL9.1ten sam produkt

AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passin...