CVE-2017-13093— The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-13093
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans
Source: NVD (National Vulnerability Database)
Vulnerability Description
The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
加密问题
Source: NVD (National Vulnerability Database)
Vulnerability Title
IEEE P1735 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IEEE P1735是一个专门用来加密电子设计的知识产权的标准。 IEEE P1735的实现存在安全漏洞。攻击者可利用该漏洞更改加密的知识产权密文，注入硬件密码，获取电子设计的知识产权信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2017-13093
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-13093
Please Login to view more intelligence information
Same Patch Batch · IEEE · 2018-07-13 · 7 CVEs total
| CVE-2017-13091 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec | |
| CVE-2017-13092 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec | |
| CVE-2017-13094 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec | |
| CVE-2017-13095 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec | |
| CVE-2017-13096 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec | |
| CVE-2017-13097 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellec |
IV. Related Vulnerabilities
Same product: Standard
- CVE-2017-13091
The P1735 IEEE standard describes flawed methods for encrypt - CVE-2017-13092
The P1735 IEEE standard describes flawed methods for encrypt - CVE-2017-13094
The P1735 IEEE standard describes flawed methods for encrypt - CVE-2017-13095
The P1735 IEEE standard describes flawed methods for encrypt - CVE-2017-13096
The P1735 IEEE standard describes flawed methods for encrypt
Same vendor: IEEE
- CVE-2021-27862
L2 network filtering bypass using stacked VLAN0 and LLC/SNAP - CVE-2021-27861
L2 network filtering bypass using stacked VLAN0 and LLC/SNAP - CVE-2021-27853
L2 network filtering can be bypassed using stacked VLAN0 and - CVE-2017-13092
The P1735 IEEE standard describes flawed methods for encrypt - CVE-2017-13094
The P1735 IEEE standard describes flawed methods for encrypt
Same weakness: CWE-310
V. Comments for CVE-2017-13093
No comments yet