PT-2018-5474 · Ieee · Ieee P1735

Animesh Chhotaray + 1 · Publicado 2018-07-13 · Atualizado 2019-10-09 · CVE-2017-13097

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IEEE P1735 (affected versions not specified)

Description: The P1735 IEEE standard has flawed methods for encrypting electronic-design intellectual property (IP) and managing access rights. These flaws enable attack vectors, allowing recovery of the underlying plaintext IP. Implementations of this standard may be weak to cryptographic attacks, enabling attackers to obtain plaintext intellectual property without the key.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2017-13097

Produtos afetados

Ieee P1735

Referências · 3

• http://securityfocus.com/bid/101699 · Nota
• https://kb.cert.org/vuls/id/739007 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-13097 · Nota de Segurança