STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Link | Tags |
---|---|
https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/ | not applicable |
https://eprint.iacr.org/2021/640 | third party advisory |
https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html | third party advisory |