Skip to main content

Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

CVE-2021-38394

Medium
6.2/10

Summary

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted.

  • HIGH
  • PHYSICAL
  • HIGH
  • CHANGED
  • REQUIRED
  • NONE
  • LOW
  • LOW

CWE-1278 - Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques

Information stored in hardware may be recovered by an attacker with the capability to capture and analyze images of the integrated circuit using techniques such as scanning electron microscopy.

References

Advisory Timeline

  • Published