Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 17

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.

CVSS 3.1LOW 3.8 Physical High privileges No interaction EPSS 0.00117 Published 2026-05-14 Fixed in 7.2.4.0 CWE-1300
Priority LOW 31

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00198 Published 2024-07-11 Fixed in v10.10.19 CWE-305
Priority LOW 17

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Obs…

CVSS 3.1LOW 3.8 Physical High privileges No interaction EPSS 0.00207 Published 2021-08-10 No fix listed CWE-203