CVE-2019-14236
First published: Thu Sep 12 2019(Updated: )
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| St Stm32l0 Firmware | ||
| St Stm32l0 | ||
| St Stm32l1 Firmware | ||
| St Stm32l1 | ||
| St Stm32f4 Firmware | ||
| St Stm32f4 | ||
| St Stm32l4 Firmware | ||
| St Stm32l4 | ||
| St Stm32f7 Firmware | ||
| St Stm32f7 | ||
| St Stm32h7 Firmware | ||
| St Stm32h7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-14236?
CVE-2019-14236 is a vulnerability found on STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices where the Proprietary Code Read Out Protection (PCROP) can be defeated.
What is Proprietary Code Read Out Protection (PCROP)?
Proprietary Code Read Out Protection (PCROP) is a software IP protection method used on STMicroelectronics STM32 devices.
How does the vulnerability affect the STM32 devices?
The vulnerability affects the STM32 devices by allowing the defeat of the Proprietary Code Read Out Protection (PCROP) by observing CPU registers and the effect of code/instruction execution.
What is the severity of CVE-2019-14236?
The severity of CVE-2019-14236 is critical with a CVSS score of 9.8.
Is there a fix available for CVE-2019-14236?
Currently, there is no known fix available for CVE-2019-14236. It is recommended to follow any updates from STMicroelectronics and apply patches or mitigations as they become available.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/st
- canonical/st stm32l0 firmware
- canonical/st stm32l0
- canonical/st stm32l1 firmware
- canonical/st stm32l1
- canonical/st stm32f4 firmware
- canonical/st stm32f4
- canonical/st stm32l4 firmware
- canonical/st stm32l4
- canonical/st stm32f7 firmware
- canonical/st stm32f7
- canonical/st stm32h7 firmware
- canonical/st stm32h7