Nxp Kinetis KV3X Firmware vulnerabilities

2 CVEs affecting Nxp Kinetis KV3X Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14239, published 2019-09-24.

More from Nxp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-14237, published 2019-09-12. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by observing CPU registers and the…
• CVE-2019-14239, published 2019-09-24. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by leveraging a load instruction…