CVE-2017-18347: St STM32F030C6 Firmware

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands because there is a race condition between full initialization of the SWD interface and the setup of flash protection.

Affected products

• St STM32F030C6 Firmware: affected versions not specified
• St STM32F030C8 Firmware: affected versions not specified
• St STM32F030CC Firmware: affected versions not specified
• St STM32F030F4 Firmware: affected versions not specified
• St STM32F030K6 Firmware: affected versions not specified
• St STM32F030R8 Firmware: affected versions not specified
• St STM32F030RC Firmware: affected versions not specified
• St STM32F031C4 Firmware: affected versions not specified
• St STM32F031C6 Firmware: affected versions not specified
• St STM32F031E6 Firmware: affected versions not specified
• St STM32F031F4 Firmware: affected versions not specified
• St STM32F031F6 Firmware: affected versions not specified
• St STM32F031G4 Firmware: affected versions not specified
• St STM32F031G6 Firmware: affected versions not specified
• St STM32F031K4 Firmware: affected versions not specified
• St STM32F038C6 Firmware: affected versions not specified
• St STM32F038E6 Firmware: affected versions not specified
• St STM32F038F6 Firmware: affected versions not specified
• St STM32F038G6 Firmware: affected versions not specified
• St STM32F038K6 Firmware: affected versions not specified
• St STM32F042C4 Firmware: affected versions not specified
• St STM32F042C6 Firmware: affected versions not specified
• St STM32F042F4 Firmware: affected versions not specified
• St STM32F042F6 Firmware: affected versions not specified
• St STM32F042G4 Firmware: affected versions not specified
• and 47 more

Published 2018-09-12. Last modified 2026-06-17.