{"resultsPerPage":9,"startIndex":0,"totalResults":9,"format":"NVD_CVE","version":"2.0","timestamp":"2026-07-21T02:11:01.826","vulnerabilities":[{"cve":{"id":"CVE-2017-13091","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.113","lastModified":"2026-06-17T01:04:31.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including improperly specified padding in CBC mode allows use of an EDA tool as a decryption oracle. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo el relleno especificado erróneamente en modo CBC que permite el uso de una herramienta EDA como oráculo de descifrado. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007: The P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts. \n<br />\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable. \nThe CPE configuration provided is likely not inclusive of all vulnerable products. Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13092","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.160","lastModified":"2026-06-17T01:04:31.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la sintaxis HDL especificada erróneamente que permite el uso de una herramienta EDA como oráculo de descifrado. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13093","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.207","lastModified":"2026-06-17T01:04:31.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de texto IP cifrado para insertar troyanos de hardware. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13094","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.253","lastModified":"2026-06-17T01:04:31.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of the encryption key and insertion of hardware trojans in any IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de la clave de cifrado y la inserción de troyanos de hardware en cualquier IP. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13095","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.283","lastModified":"2026-06-17T01:04:32.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of a license-deny response to a license grant. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de una respuesta license-deny a una concesión de licencia. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13096","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.330","lastModified":"2026-06-17T01:04:32.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of Rights Block to remove or relax access control. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de Rights Block para eliminar o relajar los controles de acceso. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2017-13097","sourceIdentifier":"cret@cert.org","published":"2018-07-13T20:29:02.363","lastModified":"2026-06-17T01:04:32.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of Rights Block to remove or relax license requirement. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."},{"lang":"es","value":"El estándar IEEE P1735 describe métodos con errores para cifrar propiedad intelectual electrónica (IP), así como la gestión de los derechos de acceso a esa IP, incluyendo la modificación de Rights Block para eliminar o relajar los requisitos de licencia. Los métodos tienen errores y, en el peor de los casos, habilita vectores de ataque que permiten la recuperación de toda la IP subyacente en texto plano. Las implementaciones de IEEE P1735 podrían ser débiles a ataques criptográficos que permiten que un atacante obtenga propiedad intelectual en texto plano sin la clave, entre otros impactos."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"IEEE","product":"Standard","versions":[{"version":"P1735","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:-:-:-:*:*:*:*:*:*:*","matchCriteriaId":"B57298C9-DC87-4CF3-AEAA-D86A51ED410F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101699","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/101699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/739007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}],"evaluatorComment":"According to https://www.kb.cert.org/vuls/id/739007:\nThe P1735 IEEE standard describes methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.\n<br />\n\nCommercial electronic design automation (EDA) tools that utilize the P1735 standard, or products designed with such EDA tools may be vulnerable.\n<br />\nThe CPE configuration provided is likely not inclusive of all vulnerable products.  Please contact the vendor of your product for more information."}},{"cve":{"id":"CVE-2023-33956","sourceIdentifier":"security-advisories@github.com","published":"2023-06-05T20:15:09.460","lastModified":"2026-06-17T06:02:35.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference (IDOR) vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any other user, regardless of their privileges or restrictions. By Changing the file_id any user can render all the files where MimeType is image uploaded under **/files** directory regard less of uploaded by any user. This vulnerability poses a significant impact and severity to the application's security. By manipulating the URL parameter, an attacker can access sensitive files that should only be available to authorized users. This includes confidential documents or any other type of file stored within the application. The ability to read these files can lead to various detrimental consequences, such as unauthorized disclosure of sensitive information, privacy breaches, intellectual property theft, or exposure of trade secrets. Additionally, it could result in legal and regulatory implications, reputation damage, financial losses, and potential compromise of user trust. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"kanboard","product":"kanboard","versions":[{"version":"< 1.2.30","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-08T16:03:41.776228Z","id":"CVE-2023-33956","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.30","matchCriteriaId":"082DAE98-80F0-4423-8581-AB8D0051EAA1"}]}]}],"references":[{"url":"https://github.com/kanboard/kanboard/commit/437b141fa2267df36976814e704517f30d2424bd","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/kanboard/kanboard/security/advisories/GHSA-r36m-44gg-wxg2","source":"security-advisories@github.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/kanboard/kanboard/commit/437b141fa2267df36976814e704517f30d2424bd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/kanboard/kanboard/security/advisories/GHSA-r36m-44gg-wxg2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-4828","sourceIdentifier":"security@proofpoint.com","published":"2023-09-13T16:15:11.197","lastModified":"2026-06-17T06:38:42.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected."},{"lang":"es","value":"Un atacante podría utilizar una verificación inadecuada de una condición excepcional en el servidor Insider Threat Management (ITM) para cambiar la configuración del servidor de cualquier agente ya registrado para que el mismo envíe todas las comunicaciones futuras a una URL elegida por el atacante. Esto podría resultar en la divulgación de eventos de datos confidenciales por parte del agente sobre Personally Identifiable Information (PII) y la propiedad intelectual que monitoriza, y todos esos datos podrían modificarse o eliminarse antes de llegar al servidor ITM. Un atacante primero debe obtener con éxito credenciales de agente y un agent hostname válido. Todas las versiones anteriores a la 7.14.3.69 se ven afectadas."}],"affected":[{"source":"security@proofpoint.com","affectedData":[{"vendor":"Proofpoint","product":"ITM Server","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"7.14.3","versionType":"semver","status":"affected","changes":[{"at":"7.14.3.69","status":"unaffected"}]}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"proofpoint","product":"insider_threat_management_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:proofpoint:insider_threat_management_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7.14.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@proofpoint.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:36:23.827352Z","id":"CVE-2023-4828","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@proofpoint.com","type":"Secondary","description":[{"lang":"en","value":"CWE-754"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*","versionEndExcluding":"7.14.3.69","matchCriteriaId":"F9FC2AE2-2895-4A5C-A150-241CBDE2476A"}]}]}],"references":[{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-008","source":"security@proofpoint.com","tags":["Broken Link"]},{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0008","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}}]}