CVE-2017-18347 : Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series dev

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

Published 2018-09-12 15:29:00

Updated 2021-05-04 14:07:13

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-18347

ST » Stm32f071rb Firmware » Version: N/A
cpe:2.3:o:st:stm32f071rb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f071rb » Version: N/A
ST » Stm32f071v8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f071v8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f071v8 » Version: N/A
ST » Stm32f071vb Firmware » Version: N/A
cpe:2.3:o:st:stm32f071vb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f071vb » Version: N/A
ST » Stm32f072c8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f072c8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072c8 » Version: N/A
ST » Stm32f072cb Firmware » Version: N/A
cpe:2.3:o:st:stm32f072cb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072cb » Version: N/A
ST » Stm32f072r8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f072r8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072r8 » Version: N/A
ST » Stm32f072rb Firmware » Version: N/A
cpe:2.3:o:st:stm32f072rb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072rb » Version: N/A
ST » Stm32f072v8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f072v8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072v8 » Version: N/A
ST » Stm32f072vb Firmware » Version: N/A
cpe:2.3:o:st:stm32f072vb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f072vb » Version: N/A
ST » Stm32f078cb Firmware » Version: N/A
cpe:2.3:o:st:stm32f078cb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f078cb » Version: N/A
ST » Stm32f078rb Firmware » Version: N/A
cpe:2.3:o:st:stm32f078rb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f078rb » Version: N/A
ST » Stm32f078vb Firmware » Version: N/A
cpe:2.3:o:st:stm32f078vb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f078vb » Version: N/A
ST » Stm32f091cb Firmware » Version: N/A
cpe:2.3:o:st:stm32f091cb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091cb » Version: N/A
ST » Stm32f091cc Firmware » Version: N/A
cpe:2.3:o:st:stm32f091cc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091cc » Version: N/A
ST » Stm32f091rb Firmware » Version: N/A
cpe:2.3:o:st:stm32f091rb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091rb » Version: N/A
ST » Stm32f091rc Firmware » Version: N/A
cpe:2.3:o:st:stm32f091rc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091rc » Version: N/A
ST » Stm32f091vb Firmware » Version: N/A
cpe:2.3:o:st:stm32f091vb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091vb » Version: N/A
ST » Stm32f091vc Firmware » Version: N/A
cpe:2.3:o:st:stm32f091vc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f091vc » Version: N/A
ST » Stm32f098cc Firmware » Version: N/A
cpe:2.3:o:st:stm32f098cc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f098cc » Version: N/A
ST » Stm32f098rc Firmware » Version: N/A
cpe:2.3:o:st:stm32f098rc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f098rc » Version: N/A
ST » Stm32f098vc Firmware » Version: N/A
cpe:2.3:o:st:stm32f098vc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f098vc » Version: N/A
ST » Stm32f070c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f070c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f070c6 » Version: N/A
ST » Stm32f070cb Firmware » Version: N/A
cpe:2.3:o:st:stm32f070cb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f070cb » Version: N/A
ST » Stm32f070f6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f070f6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f070f6 » Version: N/A
ST » Stm32f070rb Firmware » Version: N/A
cpe:2.3:o:st:stm32f070rb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f070rb » Version: N/A
ST » Stm32f071c8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f071c8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f071c8 » Version: N/A
ST » Stm32f071cb Firmware » Version: N/A
cpe:2.3:o:st:stm32f071cb_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f071cb » Version: N/A
ST » Stm32f051t8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051t8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051t8 » Version: N/A
ST » Stm32f058c8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f058c8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f058c8 » Version: N/A
ST » Stm32f058r8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f058r8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f058r8 » Version: N/A
ST » Stm32f058t8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f058t8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f058t8 » Version: N/A
ST » Stm32f051k4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051k4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051k4 » Version: N/A
ST » Stm32f051k6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051k6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051k6 » Version: N/A
ST » Stm32f051k8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051k8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051k8 » Version: N/A
ST » Stm32f051r4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051r4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051r4 » Version: N/A
ST » Stm32f051r6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051r6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051r6 » Version: N/A
ST » Stm32f051r8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051r8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051r8 » Version: N/A
ST » Stm32f042t6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042t6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042t6 » Version: N/A
ST » Stm32f048c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f048c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f048c6 » Version: N/A
ST » Stm32f048g6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f048g6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f048g6 » Version: N/A
ST » Stm32f048t6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f048t6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f048t6 » Version: N/A
ST » Stm32f051c4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051c4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051c4 » Version: N/A
ST » Stm32f051c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051c6 » Version: N/A
ST » Stm32f051c8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f051c8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f051c8 » Version: N/A
ST » Stm32f042f4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042f4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042f4 » Version: N/A
ST » Stm32f042f6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042f6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042f6 » Version: N/A
ST » Stm32f042g4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042g4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042g4 » Version: N/A
ST » Stm32f042g6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042g6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042g6 » Version: N/A
ST » Stm32f042k4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042k4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042k4 » Version: N/A
ST » Stm32f042k6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042k6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042k6 » Version: N/A
ST » Stm32f038c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f038c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f038c6 » Version: N/A
ST » Stm32f038e6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f038e6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f038e6 » Version: N/A
ST » Stm32f038f6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f038f6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f038f6 » Version: N/A
ST » Stm32f038g6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f038g6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f038g6 » Version: N/A
ST » Stm32f038k6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f038k6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f038k6 » Version: N/A
ST » Stm32f042c4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042c4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042c4 » Version: N/A
ST » Stm32f042c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f042c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f042c6 » Version: N/A
ST » Stm32f031e6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031e6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031e6 » Version: N/A
ST » Stm32f031f4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031f4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031f4 » Version: N/A
ST » Stm32f031f6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031f6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031f6 » Version: N/A
ST » Stm32f031g4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031g4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031g4 » Version: N/A
ST » Stm32f031g6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031g6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031g6 » Version: N/A
ST » Stm32f031k4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031k4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031k4 » Version: N/A
ST » Stm32f030f4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f030f4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030f4 » Version: N/A
ST » Stm32f030k6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f030k6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030k6 » Version: N/A
ST » Stm32f030r8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f030r8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030r8 » Version: N/A
ST » Stm32f030rc Firmware » Version: N/A
cpe:2.3:o:st:stm32f030rc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030rc » Version: N/A
ST » Stm32f031c4 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031c4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031c4 » Version: N/A
ST » Stm32f031c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f031c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f031c6 » Version: N/A
ST » Stm32f030c6 Firmware » Version: N/A
cpe:2.3:o:st:stm32f030c6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030c6 » Version: N/A
ST » Stm32f030c8 Firmware » Version: N/A
cpe:2.3:o:st:stm32f030c8_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030c8 » Version: N/A
ST » Stm32f030cc Firmware » Version: N/A
cpe:2.3:o:st:stm32f030cc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32f030cc » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-18347

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-18347

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:C/I:N/A:N	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: None Availability Impact: None
4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2017-18347

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-18347

https://www.aisec.fraunhofer.de/en/FirmwareProtection.html

Shedding too much Light on a Microcontroller’s Firmware Protection - Fraunhofer AISEC
Exploit;Third Party Advisory

CVEs referencing this url
https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier

Shedding too much Light on a Microcontroller's Firmware Protection | USENIX
Exploit;Third Party Advisory
https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32

readout protection cracked on STM32
Vendor Advisory

Jump to

Vulnerability Details : CVE-2017-18347

Products affected by CVE-2017-18347

Exploit prediction scoring system (EPSS) score for CVE-2017-18347

CVSS scores for CVE-2017-18347

CWE ids for CVE-2017-18347

References for CVE-2017-18347