Microchip ATSAMA5D27-SOM1 Firmware vulnerabilities

3 CVEs affecting Microchip ATSAMA5D27-SOM1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12789, published 2020-09-14.

More from Microchip.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12788, published 2020-09-14. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.
• CVE-2020-12789, published 2020-09-14. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.
• CVE-2020-12787, published 2020-09-14. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling.