CVE-2017-18347

4.6 mediumEPSS 0.4%

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2018-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

st:stm32f030c6_firmware
st:stm32f030c8_firmware
st:stm32f030cc_firmware
st:stm32f030f4_firmware
st:stm32f030k6_firmware
st:stm32f030r8_firmware
st:stm32f030rc_firmware
st:stm32f031c4_firmware
st:stm32f031c6_firmware
st:stm32f031e6_firmware
st:stm32f031f4_firmware
st:stm32f031f6_firmware
st:stm32f031g4_firmware
st:stm32f031g6_firmware
st:stm32f031k4_firmware
st:stm32f038c6_firmware
st:stm32f038e6_firmware
st:stm32f038f6_firmware
st:stm32f038g6_firmware
st:stm32f038k6_firmware
st:stm32f042c4_firmware
st:stm32f042c6_firmware
st:stm32f042f4_firmware
st:stm32f042f6_firmware
st:stm32f042g4_firmware
st:stm32f042g6_firmware
st:stm32f042k4_firmware
st:stm32f042k6_firmware
st:stm32f042t6_firmware
st:stm32f048c6_firmware
st:stm32f048g6_firmware
st:stm32f048t6_firmware
st:stm32f051c4_firmware
st:stm32f051c6_firmware
st:stm32f051c8_firmware
st:stm32f051k4_firmware
st:stm32f051k6_firmware
st:stm32f051k8_firmware
st:stm32f051r4_firmware
st:stm32f051r6_firmware
st:stm32f051r8_firmware
st:stm32f051t8_firmware
st:stm32f058c8_firmware
st:stm32f058r8_firmware
st:stm32f058t8_firmware
st:stm32f070c6_firmware
st:stm32f070cb_firmware
st:stm32f070f6_firmware
st:stm32f070rb_firmware
st:stm32f071c8_firmware

References

Check your stack JSON