CVE-2020-27211

Katalog CVE

CVSS 5.7 · Medium EPSS 0,27%

Kerentanan Observable Discrepancy pada nordicsemi nrf52840 firmware. Skor CVSS 3.1 5.7 (Medium) menurut NVD.

Deskripsi (NVD)

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can be bypassed by injecting a fault during the boot phase.

Rincian

Terbit di NVD

21 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.7 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 18,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://eprint.iacr.org/2021/640 advisory pihak ketiga
• https://infocenter.nordicsemi.com/pdf/in_133_v1.0.pdf advisory pihak ketiga
• https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/ advisory pihak ketiga
• https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-... advisory pihak ketiga
• https://www.aisec.fraunhofer.de/en/FirmwareProtection.html advisory pihak ketiga