PT-2018-5472 · Ieee · Ieee P1735

Animesh Chhotaray + 1 · Publicado 2018-07-13 · Atualizado 2019-10-09 · CVE-2017-13095

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IEEE P1735 (affected versions not specified)

Description: The P1735 IEEE standard has flawed encryption methods for electronic-design intellectual property (IP) and access rights management. These flaws can enable attack vectors, allowing recovery of the underlying plaintext IP. Implementations of this standard may be weak to cryptographic attacks, potentially allowing attackers to obtain plaintext intellectual property without the key.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2017-13095

Produtos afetados

Ieee P1735

Referências · 3

• http://securityfocus.com/bid/101699 · Nota
• https://kb.cert.org/vuls/id/739007 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-13095 · Nota de Segurança