gigadevice records
6 published records for vendor gigadevice.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-668 Exposure of Resource to Wrong Sphere3
- CWE-20 Improper Input Validation1
- CWE-276 Incorrect Default Permissions1
- CWE-284 Improper Access Control1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2024-21741No exploit | GigaDevice GD32E103C8T6 devices have Incorrect Access Control.CWE-284 | Critical9.8 | 0.4%Jun 25, 2024 |
27Monitor | CVE-2020-13468No exploit | Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bondinggigadevice · gd32f130 firmware · CWE-276 | Medium6.8 | 0.5%Aug 31, 2020 |
27Monitor | CVE-2020-13465No exploit | The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code viagigadevice · gd32f103 firmware · CWE-20 | Medium6.8 | 0.5%Aug 31, 2020 |
18Monitor | CVE-2020-13469No exploit | The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface bygigadevice · gd32vf103 firmware · CWE-668 | Medium4.6 | 0.3%Aug 31, 2020 |
18Monitor | CVE-2020-13472No exploit | The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by gigadevice · gd32f103 firmware · CWE-668 | Medium4.6 | 0.3%Aug 31, 2020 |
18Monitor | CVE-2020-13470No exploit | Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-gigadevice · gd32f103 firmware · CWE-668 | Medium4.6 | 0.3%Aug 31, 2020 |
- CVE-2024-2174139Monitor
GigaDevice GD32E103C8T6 devices have Incorrect Access Control.
CriticalCVSS 9.8No exploitEPSS 0%Jun 25, 2024
- CVE-2020-1346827Monitor
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding
MediumCVSS 6.8No exploitEPSS 0%gigadevice · gd32f130 firmwareAug 31, 2020
- CVE-2020-1346527Monitor
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via
MediumCVSS 6.8No exploitEPSS 0%gigadevice · gd32f103 firmwareAug 31, 2020
- CVE-2020-1346918Monitor
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by
MediumCVSS 4.6No exploitEPSS 0%gigadevice · gd32vf103 firmwareAug 31, 2020
- CVE-2020-1347218Monitor
The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by
MediumCVSS 4.6No exploitEPSS 0%gigadevice · gd32f103 firmwareAug 31, 2020
- CVE-2020-1347018Monitor
Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-
MediumCVSS 4.6No exploitEPSS 0%gigadevice · gd32f103 firmwareAug 31, 2020