1. Home
  2. CVE Database
  3. CVE-2019-14236
CRITICAL · 9.8

CVE-2019-14236

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU ...

Vulnerability Description

On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
StStm32L0 Firmware-
StStm32L0-
StStm32L1 Firmware-
StStm32L1-
StStm32F4 Firmware-
StStm32F4-
StStm32L4 Firmware-
StStm32L4-
StStm32F7 Firmware-
StStm32F7-
StStm32H7 Firmware-
StStm32H7-

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2019-14236?

CVE-2019-14236 is a vulnerability with a CVSS score of 9.8 (CRITICAL). On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU ...

How severe is CVE-2019-14236?

CVE-2019-14236 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-14236?

Check the references section above for vendor advisories and patch information. Affected products include: St Stm32L0 Firmware, St Stm32L0, St Stm32L1 Firmware, St Stm32L1, St Stm32F4 Firmware.