CVE-2020-12789: High severity microchip atsama5d21c-cu firmware vulnerability

Published Sep 14, 2020
·
Updated

The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.

Affected Software

152 affected components
Microchip Atsama5d21c-cu Firmware
Microchip Atsama5d21c-cu
Microchip Atsama5d21c-cur Firmware
Microchip Atsama5d21c-cur
Microchip Atsama5d22c-cn Firmware
Microchip Atsama5d22c-cn
Microchip Atsama5d22c-cnr Firmware
Microchip Atsama5d22c-cnr
Microchip Atsama5d22c-cu Firmware
Microchip Atsama5d22c-cu
Microchip Atsama5d22c-cur Firmware
Microchip Atsama5d22c-cur
Microchip Atsama5d23c-cn Firmware
Microchip Atsama5d23c-cn
Microchip Atsama5d23c-cnr Firmware
Microchip Atsama5d23c-cnr
Microchip Atsama5d23c-cu Firmware
Microchip Atsama5d23c-cu
Microchip Atsama5d23c-cur Firmware
Microchip Atsama5d23c-cur
Microchip Atsama5d24c-cu Firmware
Microchip Atsama5d24c-cu
Microchip Atsama5d24c-cuf Firmware
Microchip Atsama5d24c-cuf
Microchip Atsama5d24c-cur Firmware
Microchip Atsama5d24c-cur
Microchip Atsama5d26c-cn Firmware
Microchip Atsama5d26c-cn
Microchip Atsama5d26c-cnr Firmware
Microchip Atsama5d26c-cnr
Microchip Atsama5d26c-cu Firmware
Microchip Atsama5d26c-cu
Microchip Atsama5d26c-cur Firmware
Microchip Atsama5d26c-cur
Microchip Atsama5d27c-cn Firmware
Microchip Atsama5d27c-cn
Microchip Atsama5d27c-cnr Firmware
Microchip Atsama5d27c-cnr
Microchip Atsama5d27c-cu Firmware
Microchip Atsama5d27c-cu
Microchip Atsama5d27c-cur Firmware
Microchip Atsama5d27c-cur
Microchip Atsama5d28c-cn Firmware
Microchip Atsama5d28c-cn
Microchip Atsama5d28c-cnr Firmware
Microchip Atsama5d28c-cnr
Microchip Atsama5d28c-cu Firmware
Microchip Atsama5d28c-cu
Microchip Atsama5d28c-cur Firmware
Microchip Atsama5d28c-cur
Microchip Atsama5d27c-cnvao Firmware
Microchip Atsama5d27c-cnvao
Microchip Atsama5d27c-cnrvao Firmware
Microchip Atsama5d27c-cnrvao
Microchip Atsama5d225c-d1m-cur Firmware
Microchip Atsama5d225c-d1m-cur
Microchip Atsama5d27c-d5m-cu Firmware
Microchip Atsama5d27c-d5m-cu
Microchip Atsama5d27c-d5m-cur Firmware
Microchip Atsama5d27c-d5m-cur
Microchip Atsama5d27c-d1g-cu Firmware
Microchip Atsama5d27c-d1g-cu
Microchip Atsama5d27c-d1g-cur Firmware
Microchip Atsama5d27c-d1g-cur
Microchip Atsama5d28c-d1g-cu Firmware
Microchip Atsama5d28c-d1g-cu
Microchip Atsama5d28c-d1g-cur Firmware
Microchip Atsama5d28c-d1g-cur
Microchip Atsama5d27c-ld1g-cu Firmware
Microchip Atsama5d27c-ld1g-cu
Microchip Atsama5d27c-ld1g-cur Firmware
Microchip Atsama5d27c-ld1g-cur
Microchip Atsama5d27c-ld2g-cu Firmware
Microchip Atsama5d27c-ld2g-cu
Microchip Atsama5d27c-ld2g-cur Firmware
Microchip Atsama5d27c-ld2g-cur
Microchip Atsama5d28c-ld1g-cu Firmware
Microchip Atsama5d28c-ld1g-cu
Microchip Atsama5d28c-ld1g-cur Firmware
Microchip Atsama5d28c-ld1g-cur
Microchip Atsama5d28c-ld2g-cu Firmware
Microchip Atsama5d28c-ld2g-cu
Microchip Atsama5d28c-ld2g-cur Firmware
Microchip Atsama5d28c-ld2g-cur
Microchip Atsama5d27-wlsom1 Firmware
Microchip Atsama5d27-wlsom1
Microchip Atsama5d27-som1 Firmware
Microchip Atsama5d27-som1
Microchip Atsama5d31a-cu Firmware
Microchip Atsama5d31a-cu
Microchip Atsama5d31a-cur Firmware
Microchip Atsama5d31a-cur
Microchip Atsama5d31a-cfu Firmware
Microchip Atsama5d31a-cfu
Microchip Atsama5d31a-cfur Firmware
Microchip Atsama5d31a-cfur
Microchip Atsama5d33a-cu Firmware
Microchip Atsama5d33a-cu
Microchip Atsama5d33a-cur Firmware
Microchip Atsama5d33a-cur
Microchip Atsama5d34a-cu Firmware
Microchip Atsama5d34a-cu
Microchip Atsama5d34a-cur Firmware
Microchip Atsama5d34a-cur
Microchip Atsama5d35a-cu Firmware
Microchip Atsama5d35a-cu
Microchip Atsama5d35a-cur Firmware
Microchip Atsama5d35a-cur
Microchip Atsama5d35a-cn Firmware
Microchip Atsama5d35a-cn
Microchip Atsama5d35a-cnr Firmware
Microchip Atsama5d35a-cnr
Microchip Atsama5d36a-cu Firmware
Microchip Atsama5d36a-cu
Microchip Atsama5d36a-cur Firmware
Microchip Atsama5d36a-cur
Microchip Atsama5d36a-cn Firmware
Microchip Atsama5d36a-cn
Microchip Atsama5d36a-cnr Firmware
Microchip Atsama5d36a-cnr
Microchip Atsama5d41a-cu Firmware
Microchip Atsama5d41a-cu
Microchip Atsama5d41a-cur Firmware
Microchip Atsama5d41a-cur
Microchip Atsama5d41b-cu Firmware
Microchip Atsama5d41b-cu
Microchip Atsama5d41b-cur Firmware
Microchip Atsama5d41b-cur
Microchip Atsama5d42a-cu Firmware
Microchip Atsama5d42a-cu
Microchip Atsama5d42a-cur Firmware
Microchip Atsama5d42a-cur
Microchip Atsama5d42b-cu Firmware
Microchip Atsama5d42b-cu
Microchip Atsama5d42b-cur Firmware
Microchip Atsama5d42b-cur
Microchip Atsama5d43a-cu Firmware
Microchip Atsama5d43a-cu
Microchip Atsama5d43a-cur Firmware
Microchip Atsama5d43a-cur
Microchip Atsama5d43b-cu Firmware
Microchip Atsama5d43b-cu
Microchip Atsama5d43b-cur Firmware
Microchip Atsama5d43b-cur
Microchip Atsama5d44a-cu Firmware
Microchip Atsama5d44a-cu
Microchip Atsama5d44a-cur Firmware
Microchip Atsama5d44a-cur
Microchip Atsama5d44b-cu Firmware
Microchip Atsama5d44b-cu
Microchip Atsama5d44b-cur Firmware
Microchip Atsama5d44b-cur

Event History

Sep 14, 2020
CVE Published
via MITRE·01:24 PM
Data Sourced
via MITRE·01:24 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2020-12789?

CVE-2020-12789 has a medium severity rating due to the impact of potential unauthorized access to secure applets.

2

How do I fix CVE-2020-12789?

To fix CVE-2020-12789, update to the latest firmware version provided by Microchip that addresses the hardcoded key issue.

3

What products are affected by CVE-2020-12789?

CVE-2020-12789 affects multiple Microchip Atmel ATSAMA5 products, including various firmware versions for ATSAMA5D21, ATSAMA5D22, ATSAMA5D23, and others.

4

What vulnerabilities does CVE-2020-12789 exploit?

CVE-2020-12789 exploits the use of a hardcoded key in the Secure Monitor to encrypt and authenticate secure applets.

5

What are the potential impacts of CVE-2020-12789?

The potential impacts of CVE-2020-12789 include unauthorized access to secure applets as a result of improper key management.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203