Vulnerabilities > CVE-2020-13464 - Missing Authorization vulnerability in Cksic Cks32F103 Firmware

047910
CVSS 4.2 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
high complexity
cksic
CWE-862

Summary

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.

Vulnerable Configurations

Part Description Count
OS
Cksic
1
Hardware
Cksic
1

Common Weakness Enumeration (CWE)