CVE-2020-27212

First published: Fri May 21 2021(Updated: )

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
St Stm32cubel4 Firmware	<=1.16.0
St Stm32l412c8
St Stm32l412cb
St Stm32l412k8
St Stm32l412kb
St Stm32l412r8
St Stm32l412rb
St Stm32l412t8
St Stm32l412tb
St Stm32l422cb
St Stm32l422kb
St Stm32l422rb
St Stm32l422tb
St Stm32l431cb
St Stm32l431cc
St Stm32l431kb
St Stm32l431kc
St Stm32l431rb
St Stm32l431rc
St Stm32l431vc
St Stm32l432kb
St Stm32l432kc
St Stm32l433cb
St Stm32l433cc
St Stm32l433rb
St Stm32l433rc
St Stm32l433vc
St Stm32l442kc
St Stm32l443cc
St Stm32l443rc
St Stm32l443vc
St Stm32l451cc
St Stm32l451ce
St Stm32l451rc
St Stm32l451re
St Stm32l451vc
St Stm32l451ve
St Stm32l452cc
St Stm32l452ce
St Stm32l452rc
St Stm32l452re
St Stm32l452vc
St Stm32l452ve
St Stm32l462ce
St Stm32l462re
St Stm32l462ve
St Stm32l471qe
St Stm32l471qg
St Stm32l471re
St Stm32l471rg
St Stm32l471ve
St Stm32l471vg
St Stm32l471ze
St Stm32l471zg
St Stm32l475rc
St Stm32l475re
St Stm32l475rg
St Stm32l475vc
St Stm32l475ve
St Stm32l475vg
St Stm32l476je
St Stm32l476jg
St Stm32l476me
St Stm32l476mg
St Stm32l476qe
St Stm32l476qg
St Stm32l476rc
St Stm32l476re
St Stm32l476rg
St Stm32l476vc
St Stm32l476ve
St Stm32l476vg
St Stm32l476ze
St Stm32l476zg
St Stm32l486jg
St Stm32l486qg
St Stm32l486rg
St Stm32l486vg
St Stm32l486zg
St Stm32l496ae
St Stm32l496ag
St Stm32l496qe
St Stm32l496qg
St Stm32l496re
St Stm32l496rg
St Stm32l496ve
St Stm32l496vg
St Stm32l496wg
St Stm32l496ze
St Stm32l496zg
St Stm32l4a6ag
St Stm32l4a6qg
St Stm32l4a6rg
St Stm32l4a6vg
St Stm32l4a6zg

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.