CVE-2017-13093

CVE-2017-13093 describes critical flaws in the IEEE P1735 standard for encrypting electronic-design intellectual property (IP). These flaws allow attackers to recover entire plaintext IP without the encryption key, and even modify encrypted IP to insert hardware trojans. The vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community and media attention, highlighting its potential severity.