← Back

CVE-2021-29414

nvd nist
Published: May 21, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 0.9 / Impact: 5.2
Source: NVD

Description

STMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.

Affected (1)

St
1 product
Stm32cubel4 Firmware
Configuration A
1 vulnerable · 94 platform
Vulnerable SoftwareAffected Versions
Stm32cubel4 Firmware
Up to 1.17.0
Running on/withPlatform Versions
St
Stm32l412c8
All versions
St
Stm32l412cb
All versions
St
Stm32l412k8
All versions
St
Stm32l412kb
All versions
St
Stm32l412r8
All versions
St
Stm32l412rb
All versions
St
Stm32l412t8
All versions
St
Stm32l412tb
All versions
St
Stm32l422cb
All versions
St
Stm32l422kb
All versions
St
Stm32l422rb
All versions
St
Stm32l422tb
All versions
St
Stm32l431cb
All versions
St
Stm32l431cc
All versions
St
Stm32l431kb
All versions
St
Stm32l431kc
All versions
St
Stm32l431rb
All versions
St
Stm32l431rc
All versions
St
Stm32l431vc
All versions
St
Stm32l432kb
All versions
St
Stm32l432kc
All versions
St
Stm32l433cb
All versions
St
Stm32l433cc
All versions
St
Stm32l433rb
All versions
St
Stm32l433rc
All versions
St
Stm32l433vc
All versions
St
Stm32l442kc
All versions
St
Stm32l443cc
All versions
St
Stm32l443rc
All versions
St
Stm32l443vc
All versions
St
Stm32l451cc
All versions
St
Stm32l451ce
All versions
St
Stm32l451rc
All versions
St
Stm32l451re
All versions
St
Stm32l451vc
All versions
St
Stm32l451ve
All versions
St
Stm32l452cc
All versions
St
Stm32l452ce
All versions
St
Stm32l452rc
All versions
St
Stm32l452re
All versions
St
Stm32l452vc
All versions
St
Stm32l452ve
All versions
St
Stm32l462ce
All versions
St
Stm32l462re
All versions
St
Stm32l462ve
All versions
St
Stm32l471qe
All versions
St
Stm32l471qg
All versions
St
Stm32l471re
All versions
St
Stm32l471rg
All versions
St
Stm32l471ve
All versions
St
Stm32l471vg
All versions
St
Stm32l471ze
All versions
St
Stm32l471zg
All versions
St
Stm32l475rc
All versions
St
Stm32l475re
All versions
St
Stm32l475rg
All versions
St
Stm32l475vc
All versions
St
Stm32l475ve
All versions
St
Stm32l475vg
All versions
St
Stm32l476je
All versions
St
Stm32l476jg
All versions
St
Stm32l476me
All versions
St
Stm32l476mg
All versions
St
Stm32l476qe
All versions
St
Stm32l476qg
All versions
St
Stm32l476rc
All versions
St
Stm32l476re
All versions
St
Stm32l476rg
All versions
St
Stm32l476vc
All versions
St
Stm32l476ve
All versions
St
Stm32l476vg
All versions
St
Stm32l476ze
All versions
St
Stm32l476zg
All versions
St
Stm32l486jg
All versions
St
Stm32l486qg
All versions
St
Stm32l486rg
All versions
St
Stm32l486vg
All versions
St
Stm32l486zg
All versions
St
Stm32l496ae
All versions
St
Stm32l496ag
All versions
St
Stm32l496qe
All versions
St
Stm32l496qg
All versions
St
Stm32l496re
All versions
St
Stm32l496rg
All versions
St
Stm32l496ve
All versions
St
Stm32l496vg
All versions
St
Stm32l496wg
All versions
St
Stm32l496ze
All versions
St
Stm32l496zg
All versions
St
Stm32l4a6ag
All versions
St
Stm32l4a6qg
All versions
St
Stm32l4a6rg
All versions
St
Stm32l4a6vg
All versions
St
Stm32l4a6zg
All versions

Related CWEs

CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (6)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable

Timeline

No history available yet.