{"id":"CVE-2020-13464","aliases":["EUVD-2020-5715","GHSA-4wxj-8q7c-3rjw"],"status":"published","title":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices...","description":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00234,"percentile":0.14388,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-862"],"published":"2020-08-31T15:22:24Z","modified":"2026-06-17T02:53:10Z","products":[{"vendor":"cksic","product":"cks32f103_firmware"}],"references":[{"url":"https://www.usenix.org/system/files/woot20-paper-obermaier.pdf","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13464"},{"url":"https://github.com/advisories/GHSA-4wxj-8q7c-3rjw"}],"sources":{"cve":[{"id":"CVE-2020-13464","description":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.","status":"published","published":"2020-08-31T15:22:24Z","modified":"2024-08-04T12:18:18.328Z","updated_at":"2026-11-02T14:35:54.170199Z"}],"euvd":[{"id":"EUVD-2020-5715","description":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.","status":"published","published":"2020-08-31T15:22:24Z","modified":"2024-08-04T12:18:18Z","updated_at":"2026-11-03T03:07:37.76906Z"}],"ghsa":[{"id":"GHSA-4wxj-8q7c-3rjw","title":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices...","description":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.","status":"published","published":"2022-05-24T17:26:58Z","modified":"2023-01-29T05:03:52Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:45:25.163341Z"}],"nvd":[{"id":"CVE-2020-13464","description":"The flash memory readout protection in China Key Systems \u0026 Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.","status":"published","published":"2020-08-31T16:15:14.27Z","modified":"2026-06-17T02:53:10.837Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:06:13.600965Z"}]}}