CVE-2017-13094

CVE-2017-13094 describes critical flaws within the IEEE P1735 standard for encrypting electronic-design intellectual property (IP) and managing access rights. These vulnerabilities allow attackers to recover plaintext IP without the encryption key, potentially enabling hardware trojan insertion or IP modification. With a CVSS score of 7.8 (HIGH), the vulnerability presents a significant risk due to its local attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered notable community discussion and media coverage, indicating awareness of its potential impact on implementations of the P1735 standard.