CVE-2018-18056 Information disclosure in n/a
Attackers can reverse-engineer protected firmware instructions on TI microcontrollers by single-stepping through XOM-protected memory to observe state changes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-18056?
CVE-2018-18056 is a medium-severity vulnerability in n/a, published on 20 Aug 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash memory. As a consequence, it is possible to execute single instructions with arbitrary system states (e.g., registers, status flags, and SRAM content) and observe the state changes produced by the unknown instruction. An attacker could exploit this vulnerability by executing protected and unknown instructions with specific system states and observing the state changes. Based on the gathered information, it is possible to reverse-engineer the executed instructions. The processor acts as a kind of "instruction oracle."
Weakness: CWE-200
Which versions are affected by CVE-2018-18056?
It affects 2 products.
Products include Ti Tm4c123 Firmware, Ti Tm4c129 Firmware.
How do I fix CVE-2018-18056?
No fix has been published for CVE-2018-18056 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-18056 being exploited?
There is no known exploitation of CVE-2018-18056 in the wild and no public exploit code.
Sources
Also known as GHSA-9wjv-55xx-m5xp.