Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2019-16863

hw: ECDSA signature timing vulnerabilities in TPM module

STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.

CVSS 3.1 · 5.9 Medium EPSS 3.4% KEV · Not listed
Vendors
St
Products
St33tphf20i2c St33tphf20i2c Firmware St33tphf20spi and 5 more