CVE-2017-13093

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of encrypted IP cyphertext to insert hardware trojans. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-130947.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130957.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130967.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130977.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130985.9BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides CVE-2017-130995.9wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attCVE-2017-13106.5IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files toCVE-2017-131007.5DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption. Data stored using this key can bCVE-2017-131017.5Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data storeCVE-2017-131027.5Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using thCVE-2017-131047.5Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. DatCVE-2017-131055.9Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communic
CVE-2017-13093: High severity, CVSS 7.8 | Vulnix