CVE-2017-13092

CVE-2017-13092 describes critical flaws in the IEEE P1735 standard for encrypting electronic-design intellectual property (IP), allowing an attacker to recover the entire plaintext IP. While no specific products are listed, implementations of this standard are vulnerable. This high-severity vulnerability (CVSS 7.8) permits a local attacker with low privileges to achieve high confidentiality, integrity, and availability impacts without user interaction, effectively using an EDA tool as a decryption oracle. There is no evidence of active exploitation, nor are there public exploit codes in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion and media coverage, indicating awareness of its potential impact.