NetSight
critical9.8

CVE-2019-14236

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection …

Impact

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.

Affected products

VendorProductAffected versions
StStm32l0 Firmware
All versions
StStm32l1 Firmware
All versions
StStm32f4 Firmware
All versions
StStm32l4 Firmware
All versions
StStm32f7 Firmware
All versions
StStm32h7 Firmware
All versions

Weakness classification

References