medium5.9
CVE-2019-16863
STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA …
Impact
STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| St | St33tphf2espi Firmware | Versions 71.0, 71.4, 71.12, 73.0, 73.4, 73.8 |
| St | St33tphf2ei2c Firmware | Versions 73.5, 73.9 |
| St | St33tphf20spi Firmware | Versions 74.0, 74.4, 74.8, 74.16 |
| St | St33tphf20i2c Firmware | Versions 74.5, 74.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tpm.fail
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024
- https://support.f5.com/csp/article/K32412503?utm_source=f5support&%3Butm_medium=RSS
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03972en_us
- https://support.lenovo.com/us/en/product_security/LEN-29406
- https://www.st.com/content/st_com/en/campaigns/tpm-update.html
- http://tpm.fail
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024
- https://support.f5.com/csp/article/K32412503?utm_source=f5support&%3Butm_medium=RSS
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03972en_us
- https://support.lenovo.com/us/en/product_security/LEN-29406
- https://www.st.com/content/st_com/en/campaigns/tpm-update.html