CVE-2021-29414 : STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical ac

Products affected by CVE-2021-29414

ST » Stm32cubel4 Firmware
Versions up to, including, (<=) 1.17.0
cpe:2.3:o:st:stm32cubel4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: ST » Stm32l412c8 » Version: N/A
When used together with: ST » Stm32l412cb » Version: N/A
When used together with: ST » Stm32l412k8 » Version: N/A
When used together with: ST » Stm32l412kb » Version: N/A
When used together with: ST » Stm32l412r8 » Version: N/A
When used together with: ST » Stm32l412rb » Version: N/A
When used together with: ST » Stm32l412t8 » Version: N/A
When used together with: ST » Stm32l412tb » Version: N/A
When used together with: ST » Stm32l422cb » Version: N/A
When used together with: ST » Stm32l422kb » Version: N/A
When used together with: ST » Stm32l422rb » Version: N/A
When used together with: ST » Stm32l422tb » Version: N/A
When used together with: ST » Stm32l431cb » Version: N/A
When used together with: ST » Stm32l431cc » Version: N/A
When used together with: ST » Stm32l431kb » Version: N/A
When used together with: ST » Stm32l431kc » Version: N/A
When used together with: ST » Stm32l431rb » Version: N/A
When used together with: ST » Stm32l431rc » Version: N/A
When used together with: ST » Stm32l431vc » Version: N/A
When used together with: ST » Stm32l432kb » Version: N/A
When used together with: ST » Stm32l432kc » Version: N/A
When used together with: ST » Stm32l433cb » Version: N/A
When used together with: ST » Stm32l433cc » Version: N/A
When used together with: ST » Stm32l433rb » Version: N/A
When used together with: ST » Stm32l433rc » Version: N/A
When used together with: ST » Stm32l433vc » Version: N/A
When used together with: ST » Stm32l442kc » Version: N/A
When used together with: ST » Stm32l443cc » Version: N/A
When used together with: ST » Stm32l443rc » Version: N/A
When used together with: ST » Stm32l443vc » Version: N/A
When used together with: ST » Stm32l451cc » Version: N/A
When used together with: ST » Stm32l451ce » Version: N/A
When used together with: ST » Stm32l451rc » Version: N/A
When used together with: ST » Stm32l451re » Version: N/A
When used together with: ST » Stm32l451vc » Version: N/A
When used together with: ST » Stm32l451ve » Version: N/A
When used together with: ST » Stm32l452cc » Version: N/A
When used together with: ST » Stm32l452ce » Version: N/A
When used together with: ST » Stm32l452rc » Version: N/A
When used together with: ST » Stm32l452re » Version: N/A
When used together with: ST » Stm32l452vc » Version: N/A
When used together with: ST » Stm32l452ve » Version: N/A
When used together with: ST » Stm32l462ce » Version: N/A
When used together with: ST » Stm32l462re » Version: N/A
When used together with: ST » Stm32l462ve » Version: N/A
When used together with: ST » Stm32l471qe » Version: N/A
When used together with: ST » Stm32l471qg » Version: N/A
When used together with: ST » Stm32l471re » Version: N/A
When used together with: ST » Stm32l471rg » Version: N/A
When used together with: ST » Stm32l471ve » Version: N/A
When used together with: ST » Stm32l471vg » Version: N/A
When used together with: ST » Stm32l471ze » Version: N/A
When used together with: ST » Stm32l471zg » Version: N/A
When used together with: ST » Stm32l475rc » Version: N/A
When used together with: ST » Stm32l475re » Version: N/A
When used together with: ST » Stm32l475rg » Version: N/A
When used together with: ST » Stm32l475vc » Version: N/A
When used together with: ST » Stm32l475ve » Version: N/A
When used together with: ST » Stm32l475vg » Version: N/A
When used together with: ST » Stm32l476je » Version: N/A
When used together with: ST » Stm32l476jg » Version: N/A
When used together with: ST » Stm32l476me » Version: N/A
When used together with: ST » Stm32l476mg » Version: N/A
When used together with: ST » Stm32l476qe » Version: N/A
When used together with: ST » Stm32l476qg » Version: N/A
When used together with: ST » Stm32l476rc » Version: N/A
When used together with: ST » Stm32l476re » Version: N/A
When used together with: ST » Stm32l476rg » Version: N/A
When used together with: ST » Stm32l476vc » Version: N/A
When used together with: ST » Stm32l476ve » Version: N/A
When used together with: ST » Stm32l476vg » Version: N/A
When used together with: ST » Stm32l476ze » Version: N/A
When used together with: ST » Stm32l476zg » Version: N/A
When used together with: ST » Stm32l486jg » Version: N/A
When used together with: ST » Stm32l486qg » Version: N/A
When used together with: ST » Stm32l486rg » Version: N/A
When used together with: ST » Stm32l486vg » Version: N/A
When used together with: ST » Stm32l486zg » Version: N/A
When used together with: ST » Stm32l496ae » Version: N/A
When used together with: ST » Stm32l496ag » Version: N/A
When used together with: ST » Stm32l496qe » Version: N/A
When used together with: ST » Stm32l496qg » Version: N/A
When used together with: ST » Stm32l496re » Version: N/A
When used together with: ST » Stm32l496rg » Version: N/A
When used together with: ST » Stm32l496ve » Version: N/A
When used together with: ST » Stm32l496vg » Version: N/A
When used together with: ST » Stm32l496wg » Version: N/A
When used together with: ST » Stm32l496ze » Version: N/A
When used together with: ST » Stm32l496zg » Version: N/A
When used together with: ST » Stm32l4a6ag » Version: N/A
When used together with: ST » Stm32l4a6qg » Version: N/A
When used together with: ST » Stm32l4a6rg » Version: N/A
When used together with: ST » Stm32l4a6vg » Version: N/A
When used together with: ST » Stm32l4a6zg » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-29414

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-29414

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.6	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:P	3.9	4.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial
6.1	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	0.9	5.2	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

CWE ids for CVE-2021-29414

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-29414

https://eprint.iacr.org/2021/640

Cryptology ePrint Archive: Report 2021/640 - Security and Trust in Open Source Security Tokens
Third Party Advisory

CVEs referencing this url
https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html

Security and Trust in Open Source Security Tokens - Fraunhofer AISEC
Third Party Advisory

CVEs referencing this url
https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/

CVE - Fraunhofer SIT
Not Applicable

CVEs referencing this url

Vulnerability Details : CVE-2021-29414

Products affected by CVE-2021-29414

Exploit prediction scoring system (EPSS) score for CVE-2021-29414

CVSS scores for CVE-2021-29414

CWE ids for CVE-2021-29414

References for CVE-2021-29414