Unscored CVE-2020-27212 EUVD-2020-19731GHSA-whvf-9w6f-2rqw

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded fr…

Published May 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.

Advisories 1

ICSA-25-084-03 Rockwell Automation 440G TLS-Z CISA ICS & IT advisories · Mar 25, 2025

References

https://www.aisec.fraunhofer.de/en/FirmwareProtection.html
https://eprint.iacr.org/2021/640
https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.html