AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader).
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NLinux4sam At91bootstrap
APPLinux4Sam3.7.2 – 3.9.2 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE