CVE-2020-13468 Privilege escalation in n/a
Physical attackers can escalate debug interface permissions on Gigadevice GD32F130 devices via fault injection into bonding wires.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-13468?
CVE-2020-13468 is a medium-severity vulnerability in n/a, published on 31 Aug 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection).
Weakness: CWE-276
Which versions are affected by CVE-2020-13468?
It affects 1 product.
Products include Gigadevice Gd32f130 Firmware.
How do I fix CVE-2020-13468?
No fix has been published for CVE-2020-13468 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-13468 being exploited?
There is no known exploitation of CVE-2020-13468 in the wild and no public exploit code.
Sources
Also known as GHSA-qvf6-x69r-8q76.