Vulnerability Details : CVE-2020-20949
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924). The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.
Vulnerability category: Information leak
Products affected by CVE-2020-20949
- cpe:2.3:a:st:stm32cubef0:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubef1:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubef2:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubef3:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubef4:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubef7:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubeg0:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubeg4:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubeh7:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubeide:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubel0:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubel1:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubel4:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubel4\+:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubel5:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubemonitor:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubemp1:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubemx:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubeprogrammer:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubewb:-:*:*:*:*:*:*:*
- cpe:2.3:a:st:stm32cubewl:-:*:*:*:*:*:*:*
- cpe:2.3:a:ietf:public_key_cryptography_standards_\#1:1.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-20949
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-20949
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
5.9
|
MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.2
|
3.6
|
NIST |
CWE ids for CVE-2020-20949
-
The product uses a broken or risky cryptographic algorithm or protocol.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-20949
-
http://st.com
Home - STMicroelectronicsProduct
-
http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf
Technical Description;Third Party Advisory
-
https://www.st.com/en/embedded-software/x-cube-cryptolib.html
X-CUBE-CRYPTOLIB - STM32 cryptographic firmware library software expansion for STM32Cube (UM1924) - STMicroelectronicsThird Party Advisory
-
https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-your-vuln-registered-e6134846f5bb
Silence Will Fall (Or How It Can Take 2 Years to Get Your Vuln Registered) | by BI.ZONE | Jan, 2021 | MediumTechnical Description;Third Party Advisory
Jump to