PT-2018-5472 · Ieee · Ieee P1735

Animesh Chhotaray + 1 · Published 2018-07-13 · Updated 2019-10-09 · CVE-2017-13095

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IEEE P1735 (affected versions not specified)

Description: The P1735 IEEE standard has flawed encryption methods for electronic-design intellectual property (IP) and access rights management. These flaws can enable attack vectors, allowing recovery of the underlying plaintext IP. Implementations of this standard may be weak to cryptographic attacks, potentially allowing attackers to obtain plaintext intellectual property without the key.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2017-13095

Affected Products

Ieee P1735

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-13095 · Security Note
• http://securityfocus.com/bid/101699 · Note
• https://kb.cert.org/vuls/id/739007 · Note