Note:
This project will be discontinued after December 13, 2021. [more]
Product:
St33tphf20spi_firmware
(St)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 1 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-11-14 | CVE-2019-16863 | STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL. | St33tphf20i2c_firmware, St33tphf20spi_firmware, St33tphf2ei2c_firmware, St33tphf2espi_firmware | 5.9 |