CVE:CVE-2017-3225
CNNVD:CNNVD-201709-516
DENX Software Engineering Das U-Boot是德国DENX Software Engineering公司的一套可以从AES加密文件读取设备配置的引导加载程序。
DENX Software Engineering Das U-Boot中存在加密问题漏洞。本地攻击者可利用该漏洞解密数据。
solution:Upgrade denx u-boot to a higher version than 2017.09,and avoid the version (,2017.09)