STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract…
Priority LOW 32CWE-203Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Microsoft. Impact type from CWE-203.
Summary
STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.
Why it matters now
EPSS 0.03413 88th percentileScored 2026-11-07
Fix Fixed Microsoft: 1 update
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:st:st33tphf2espi_firmware:71.0:*:*:*:*:*:*:* | 71.0 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2espi_firmware:71.4:*:*:*:*:*:*:* | 71.4 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2espi_firmware:71.12:*:*:*:*:*:*:* | 71.12 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2espi_firmware:73.0:*:*:*:*:*:*:* | 73.0 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2espi_firmware:73.4:*:*:*:*:*:*:* | 73.4 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2espi_firmware:73.8:*:*:*:*:*:*:* | 73.8 | Vulnerable | STMicroelectronics |
| cpe:2.3:h:st:st33tphf2espi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2ei2c_firmware:73.5:*:*:*:*:*:*:* | 73.5 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf2ei2c_firmware:73.9:*:*:*:*:*:*:* | 73.9 | Vulnerable | STMicroelectronics |
| cpe:2.3:h:st:st33tphf2ei2c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | STMicroelectronics |
- cpe:2.3:o:st:st33tphf2espi_firmware:71.0:*:*:*:*:*:*:* Versions 71.0 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2espi_firmware:71.4:*:*:*:*:*:*:* Versions 71.4 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2espi_firmware:71.12:*:*:*:*:*:*:* Versions 71.12 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2espi_firmware:73.0:*:*:*:*:*:*:* Versions 73.0 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2espi_firmware:73.4:*:*:*:*:*:*:* Versions 73.4 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2espi_firmware:73.8:*:*:*:*:*:*:* Versions 73.8 Vulnerable ·STMicroelectronics
- cpe:2.3:h:st:st33tphf2espi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2ei2c_firmware:73.5:*:*:*:*:*:*:* Versions 73.5 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf2ei2c_firmware:73.9:*:*:*:*:*:*:* Versions 73.9 Vulnerable ·STMicroelectronics
- cpe:2.3:h:st:st33tphf2ei2c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·STMicroelectronics
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:st:st33tphf20spi_firmware:74.0:*:*:*:*:*:*:* | 74.0 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf20spi_firmware:74.4:*:*:*:*:*:*:* | 74.4 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf20spi_firmware:74.8:*:*:*:*:*:*:* | 74.8 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf20spi_firmware:74.16:*:*:*:*:*:*:* | 74.16 | Vulnerable | STMicroelectronics |
| cpe:2.3:h:st:st33tphf20spi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | STMicroelectronics |
| cpe:2.3:o:st:st33tphf20i2c_firmware:74.5:*:*:*:*:*:*:* | 74.5 | Vulnerable | STMicroelectronics |
| cpe:2.3:o:st:st33tphf20i2c_firmware:74.9:*:*:*:*:*:*:* | 74.9 | Vulnerable | STMicroelectronics |
| cpe:2.3:h:st:st33tphf20i2c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | STMicroelectronics |
- cpe:2.3:o:st:st33tphf20spi_firmware:74.0:*:*:*:*:*:*:* Versions 74.0 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf20spi_firmware:74.4:*:*:*:*:*:*:* Versions 74.4 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf20spi_firmware:74.8:*:*:*:*:*:*:* Versions 74.8 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf20spi_firmware:74.16:*:*:*:*:*:*:* Versions 74.16 Vulnerable ·STMicroelectronics
- cpe:2.3:h:st:st33tphf20spi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·STMicroelectronics
- cpe:2.3:o:st:st33tphf20i2c_firmware:74.5:*:*:*:*:*:*:* Versions 74.5 Vulnerable ·STMicroelectronics
- cpe:2.3:o:st:st33tphf20i2c_firmware:74.9:*:*:*:*:*:*:* Versions 74.9 Vulnerable ·STMicroelectronics
- cpe:2.3:h:st:st33tphf20i2c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·STMicroelectronics
Remediation
Microsoft 1 update
- Microsoft Guidance for Vulnerability in Trusted Platform Module (TPM)
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 3 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2019-16863
- 2026-10-03 Alias added: GHSA-wg83-v62r-wh2x
References
Advisory 5
- http://tpm.fail
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03972en_us
- https://support.lenovo.com/us/en/product_security/LEN-29406
- https://www.st.com/content/st_com/en/campaigns/tpm-update.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024
Sources
- CVE-2019-16863 · CVE Program
- CVE-2019-16863 · NVD
- FIRST EPSS
- GHSA-wg83-v62r-wh2x · GitHub Advisory Database · CC BY 4.0
- CVE-2019-16863 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences