Security Vulnerabilities - CVEs Published In 2020
CVE-2020-24363
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.
Known exploited
CVSS Score
8.8
EPSS Score
0.222
Published
2020-08-31
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.
CVSS Score
6.1
EPSS Score
0.01
Published
2020-08-31
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
CVSS Score
4.6
EPSS Score
0.003
Published
2020-08-31
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.
CVSS Score
4.2
EPSS Score
0.002
Published
2020-08-31
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface.
CVSS Score
6.8
EPSS Score
0.005
Published
2020-08-31
STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
CVSS Score
6.8
EPSS Score
0.004
Published
2020-08-31
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
CVSS Score
4.6
EPSS Score
0.003
Published
2020-08-31
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection).
CVSS Score
6.8
EPSS Score
0.005
Published
2020-08-31
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU.
CVSS Score
4.6
EPSS Score
0.004
Published
2020-08-31
Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.
CVSS Score
4.6
EPSS Score
0.004
Published
2020-08-31