{"cve":"CVE-2017-18347","nvd":{"published":"2018-09-12T15:29:00.233","modified":"2026-06-17T01:12:39.693","status":"Modified","description":"Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":4.6},"cwes":["CWE-362"],"references":["https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32","https://www.aisec.fraunhofer.de/en/FirmwareProtection.html","https://www.usenix.org/conference/woot17/workshop-program/presentation/obermaier","https://community.st.com/s/question/0D50X00009Xke7aSAB/readout-protection-cracked-on-stm32","https://www.aisec.fraunhofer.de/en/FirmwareProtection.html"],"products":["st:stm32f030c6_firmware","st:stm32f030c8_firmware","st:stm32f030cc_firmware","st:stm32f030f4_firmware","st:stm32f030k6_firmware","st:stm32f030r8_firmware","st:stm32f030rc_firmware","st:stm32f031c4_firmware","st:stm32f031c6_firmware","st:stm32f031e6_firmware","st:stm32f031f4_firmware","st:stm32f031f6_firmware","st:stm32f031g4_firmware","st:stm32f031g6_firmware","st:stm32f031k4_firmware","st:stm32f038c6_firmware","st:stm32f038e6_firmware","st:stm32f038f6_firmware","st:stm32f038g6_firmware","st:stm32f038k6_firmware","st:stm32f042c4_firmware","st:stm32f042c6_firmware","st:stm32f042f4_firmware","st:stm32f042f6_firmware","st:stm32f042g4_firmware","st:stm32f042g6_firmware","st:stm32f042k4_firmware","st:stm32f042k6_firmware","st:stm32f042t6_firmware","st:stm32f048c6_firmware","st:stm32f048g6_firmware","st:stm32f048t6_firmware","st:stm32f051c4_firmware","st:stm32f051c6_firmware","st:stm32f051c8_firmware","st:stm32f051k4_firmware","st:stm32f051k6_firmware","st:stm32f051k8_firmware","st:stm32f051r4_firmware","st:stm32f051r6_firmware","st:stm32f051r8_firmware","st:stm32f051t8_firmware","st:stm32f058c8_firmware","st:stm32f058r8_firmware","st:stm32f058t8_firmware","st:stm32f070c6_firmware","st:stm32f070cb_firmware","st:stm32f070f6_firmware","st:stm32f070rb_firmware","st:stm32f071c8_firmware"],"source":"nvd","synced_at":"2026-10-19T20:53:14.491561039+00:00"},"epss":{"cve":"CVE-2017-18347","score":0.004,"percentile":0.34277,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}