CVE-2020-27211
First published: Fri May 21 2021(Updated: )
Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection (APPROTECT) can be bypassed by injecting a fault during the boot phase.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nordicsemi Nrf52840 Firmware | <=2020-10-19 | |
| Nordicsemi Nrf52840 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://eprint.iacr.org/2021/640
- https://infocenter.nordicsemi.com/pdf/in_133_v1.0.pdf
- https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/
- https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html
- https://www.aisec.fraunhofer.de/en/FirmwareProtection.html
Frequently Asked Questions
What is the severity of CVE-2020-27211?
The severity of CVE-2020-27211 is medium with a CVSS score of 5.7.
What is the vulnerable software version for CVE-2020-27211?
The vulnerable software version for CVE-2020-27211 is Nordic Semiconductor nRF52840 firmware up to and including 2020-10-19.
How can the flash read-out protection (APPROTECT) be bypassed in CVE-2020-27211?
The flash read-out protection (APPROTECT) in CVE-2020-27211 can be bypassed by injecting a fault during the boot phase.
Where can I find more information about CVE-2020-27211?
More information about CVE-2020-27211 can be found at the following references: - [1] https://eprint.iacr.org/2021/640 - [2] https://infocenter.nordicsemi.com/pdf/in_133_v1.0.pdf - [3] https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/
What is the CWE category of CVE-2020-27211?
The CWE category of CVE-2020-27211 is CWE-203 (Information Exposure Through Discrepancy).
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/type
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/nordicsemi
- canonical/nordicsemi nrf52840 firmware
- version/nordicsemi nrf52840 firmware/2020-10-19
- canonical/nordicsemi nrf52840