ID CVE-2020-13470
Summary Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.
References
Vulnerable Configurations
  • cpe:2.3:o:gigadevice:gd32f103_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:gigadevice:gd32f103_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:gigadevice:gd32f103:-:*:*:*:*:*:*:*
    cpe:2.3:h:gigadevice:gd32f103:-:*:*:*:*:*:*:*
  • cpe:2.3:o:gigadevice:gd32f130_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:gigadevice:gd32f130_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:gigadevice:gd32f130:-:*:*:*:*:*:*:*
    cpe:2.3:h:gigadevice:gd32f130:-:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 03-09-2020 - 17:10)
Impact:
Exploitability:
CWE CWE-668
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
refmap via4
misc https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
Last major update 03-09-2020 - 17:10
Published 31-08-2020 - 16:15
Last modified 03-09-2020 - 17:10
Back to Top