Microchip Atsama5d36a-cur Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Microchip Atsama5d36a-cur Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-12787 — CVSS 7.5 (high): Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling.
• CVE-2020-12788 — CVSS 7.5 (high): CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.
• CVE-2020-12789 — CVSS 7.5 (high): The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.