VULNERABILITY INTELLIGENCE

CVE-2020-11683

CVSS score6.8 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2020-09-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.

Weakness classification

  • CWE-203: Observable Discrepancy

Primary references