ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability

ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability

ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability

Lenovo Security Advisory: LEN-29406

Potential Impact: Information Disclosure

Severity: High

Scope of Impact: Industry-wide

CVE Identifier: CVE-2019-16863

 

Summary Description:

ST Microelectronics has reported a vulnerability in the implementation of the Elliptic Digital Signature Algorithm (ECDSA) signature generation function that could result in exposing the private key.

 

Mitigation Strategy for Customers (what you should do to protect yourself):

ST Microelectronics recommends updating your firmware to the latest version (or newer) indicated for your model in the Product Impact section below.

 

Product Impact:

Please click for more info.

Desktop

Desktop - All in One - Not Affected

IdeaPad

Networking Switches - Not Affected

Storage - Not Affected

System x -Lenovo - Not Affected

System x (IBM) - Not Affected

ThinkPad

ThinkServer - Not Affected

ThinkStation - Not Affected

ThinkSystem - Not Affected

 

References:

www.st.com/tpm-update

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024

https://www.catalog.update.microsoft.com/Search.aspx?q=Lenovo%20STM

 

Revision History:

Revision Date Description
15 2021-04-19 Updated ThinkPad mitigation
14 2021-03-15 Updated ThinkPad
13 2020-09-09 Corrected fix version/link for ThinkPad L480/L580
12 2020-06-25 Updated IdeaPad
11 2020-05-21 Updated ThinkPad
10 2020-04-12 Updated ThinkPad
9 2020-03-19 Updated ThinkPad
8 2020-02-21 Updated ThinkPad
7 2020-02-08 Updated ThinkPad
6 2020-01-30 Updated ThinkPad
5 2020-01-15 Updated ThinkPad and Desktop
4 2019-12-28 Updated ThinkPad
3 2019-12-12 Updated ThinkPad
2 2019-11-22 Updated ThinkPad
1 2019-11-19 Initial release

For a complete list of all Lenovo Product Security Advisories, click here.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.

 

Product Impact:

Desktop

Only the following Desktop is affected:

Product Minimum Fix Version Download Link Last Updated
ThinkCentre M90n-1 M2ATPM7364 https://support.lenovo.com/downloads/DS542703 2020-01-15

 

IdeaPad

Only the following Lenovo IdeaPad Notebooks are affected:

ThinkBook 13s-IWL 9YCN47WW https://support.lenovo.com/downloads/DS539962 2020-06-25
ThinkBook 14s-IWL 9YCN47WW https://support.lenovo.com/downloads/DS539962 2020-06-25
V540s-13/14 9YCN48WW https://newsupport.lenovo.com.cn/driveDownloads_detail.html?driveId=72347 2020-06-25
昭阳K3/K4-IWL 9YCN48WW https://newsupport.lenovo.com.cn/driveDownloads_detail.html?driveId=72347 2020-06-25

 

ThinkPad

Follow the steps below for ThinkPad products:

  1. Update the system BIOS to the version level of “Minimum Version Required to Fix” as indicated in the below table.
  2. Update to the latest ST Micro TPM firmware version (or later) as described in the ST Micro advisory found here.
    1. For Windows: Update via Windows Updates or by manually downloading and installing the appropriate TPM firmware package from the Microsoft Update Catalog. To verify the firmware version, run get-tpm from an administrative Powershell prompt.
    2. For Linux: Follow update guidance found here.

 

Product Model Minimum Fix Version Download Link Last Updated
ThinkPad 10 20E3, 20E4 Not Affected   11/19/2019
ThinkPad 11e/Yoga 11e 3RD GEN 20G9, 20GB, 20G8, 20GA Not Affected   11/19/2019
ThinkPad 11e/Yoga 11e 4TH GEN (APL) 20HT, 20HV, 20HS, 20HU Not Affected   5/21/2020
ThinkPad 11e/Yoga 11e 4TH GEN (KBL) 20HT, 20HV, 20HS, 20HU R0LET34W https://support.lenovo.com/downloads/DS120787 5/21/2020
ThinkPad 11e/Yoga 11e 5TH GEN (GML) 20LR, 20LQ, 20LN, 20LM R0TET62W https://support.lenovo.com/downloads/DS502469 5/21/2020
ThinkPad 11e/Yoga 11e 5TH GEN (KBY-Y) 20LR, 20LQ, 20LN, 20LM R0VET36W https://support.lenovo.com/downloads/ds503833 5/21/2020
ThinkPad 13 (KBL) 20J1, 20J2 R0JET40W https://support.lenovo.com/downloads/DS119785 5/21/2020
ThinkPad A275 20KC, 20KD R0NET43W https://support.lenovo.com/downloads/DS502469 5/21/2020
ThinkPad A285 20MW, 20MX R0XET67W https://support.lenovo.com/downloads/DS504873 5/21/2020
ThinkPad A475 20KL, 20KM R04ET42W https://support.lenovo.com/downloads/DS500949 5/21/2020
ThinkPad A485 20MU, 20MV R0WET63W https://support.lenovo.com/downloads/DS504078 5/21/2020
ThinkPad E450/E450c/E550/E550c 20DC, 20DD, 30EH, 20DF, 20DG, 20E0 Not Affected   11/19/2019
ThinkPad E460/E560 20ET, 20EU, 20EV, 20EW Not Affected   11/19/2019
ThinkPad E470/E570 20H1, 20H2, 20H5, 20H6 R0DETA0W https://support.lenovo.com/downloads/DS119160 5/21/2020
ThinkPad E475/E575 20H4, 20H8 R0EET50W https://support.lenovo.com/downloads/DS119276 5/21/2020
ThinkPad E480/E580 20KN, 20KQ, 20KS, 20KT R0PET63W https://support.lenovo.com/downloads/DS501843 5/21/2020
ThinkPad E485/E585 20KU, 20KV R0UET77W https://support.lenovo.com/downloads/DS503790 5/21/2020
ThinkPad E490s /ThinkPad S3/ ThinkPad E490/E590/R490/R590 20N8, 20N9, 20NG R0YET41W https://support.lenovo.com/downloads/DS506071 5/21/2020
ThinkPad E570 / ThinkPad S5 20H5, 20H6 R0DETA0W https://support.lenovo.com/downloads/DS119160 5/21/2020
ThinkPad Helix 20CG, 20CH Not Affected   11/19/2019
ThinkPad Helix 3XXX Not Affected   11/19/2019
ThinkPad L380 / S3 3rd Gen
ThinkPad L380 Yoga / S2 Yoga 3rd Gen
20M5, 20M6, 20M7, 20M8 R0RET40W https://pcsupport.lenovo.com/us/zh/products/LAPTOPS-AND-NETBOOKS/THINKPAD-L-SERIES-LAPTOPS/THINKPAD-L380-TYPE-20M5-20M6/downloads/DS502400 3/15/2021
ThinkPad L390 Yoga /ThinkPad S2 Yoga 4th Gen 20NR, 20NS, 20NT, 20NU R10ET43W https://support.lenovo.com/downloads/DS505882 5/21/2020
ThinkPad L450 20DS, 20DT Not Affected   11/19/2019
ThinkPad L460 20FU, 20FV Not Affected   11/19/2019
ThinkPad L470 20J4, 20J5 R0GET71W https://support.lenovo.com/downloads/DS120327 5/21/2020
ThinkPad L470 20JU, 20JV Not Affected   11/19/2019
ThinkPad L480/L580 20LS, 20LT, 20L2, 20LX R0QET60W https://support.lenovo.com/downloads/DS502442 9/9/2020
ThinkPad L490/L590 20Q5, 20Q6, 20Q7, 20Q8 R0ZET39W https://support.lenovo.com/downloads/DS540054 5/21/2020
ThinkPad L560 20F1, 20F2 Not Affected   11/19/2019
ThinkPad L570 20JQ, 20JR N1XET68W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-L-SERIES-LAPTOPS/THINKPAD-L570-TYPE-20J8-20J9/downloads/DS120885 3/15/2021
ThinkPad P1 20MD, 20ME N2EET45W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P1-TYPE-20MD-20ME/downloads/DS504956 3/15/2021
ThinkPad P1 20Qx N2OET42W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P1-GEN-2-TYPE-20QT-20QU/downloads/DS540308 3/15/2021
ThinkPad P43s 20Rx N2IET82W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P43S-TYPE-20RH-20RJ/downloads/DS539061 3/15/2021
ThinkPad P50 20EN, 20EQ Not Affected   11/19/2019
ThinkPad P50s 20FK, 20FL Not Affected   11/19/2019
ThinkPad P51 20HH, 20HJ N1UET77W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51-TYPE-20HH-20HJ/downloads/DS121296 3/15/2021
ThinkPad P51 20MM, 20MN N1UET77W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51-TYPE-20HH-20HJ/downloads/DS121296 3/15/2021
ThinkPad P51s 20HB, 20HC N1VET52W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51S-TYPE-20HB-20HC/downloads/DS120369 3/15/2021
ThinkPad P51s 20JY, 20K0 N1VET52W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51S-TYPE-20JY-20K0/downloads/DS120369 3/15/2021
ThinkPad P52 20M9, 20MA N2CET50W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P52-TYPE-20M9-20MA/downloads/DS504024 3/15/2021
ThinkPad P52s 20LB, 20LC N27ET38W https://pcsupport.lenovo.com/downloads/DS502394 12/28/2019
ThinkPad P70 20ER, 20ES Not Affected   11/19/2019
ThinkPad P71 20HK, 20HL N1TET56W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P71/downloads/DS121301 3/15/2021
ThinkPad P72 20MB, 20MC N2CET50W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P72-TYPE-20MB-20MC/downloads/DS504024 3/15/2021
ThinkPad P73 20Qx N2NET35W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P73-TYPE-20QR-20QS/downloads/DS540999 3/15/2021
ThinkPad S1 Yoga (Non-vPro)   Not Affected   11/19/2019
ThinkPad S1 Yoga (vPro)   Not Affected   11/19/2019
ThinkPad S5 2nd Generation 20JA Not Affected   11/19/2019
ThinkPad S5 2nd Generation 20JA Not Affected   5/21/2020
ThinkPad S5 Yoga 15 20DQ, 20DR Not Affected   11/19/2019
ThinkPad S5/E560p 20G5,20G4 Not Affected   11/19/2019
ThinkPad S531 20B0 Not Affected   11/19/2019
ThinkPad S540 20B3 Not Affected   11/19/2019
ThinkPad T25 20K7 N1QET86W https://pcsupport.lenovo.com/downloads/DS120429 1/15/2020
ThinkPad T440/T440s 20B6, 20B7, 20AQ, 20AR Not Affected   11/19/2019
ThinkPad T440p 20AN, 20AW Not Affected   11/19/2019
ThinkPad T450/T450s 20BU, 20BV, 20DJ, 20BW, 20BX Not Affected   11/19/2019
ThinkPad T450/T450s 20BU, 20BV, 20DJ, 20BW, 20BX Not Affected   11/19/2019
ThinkPad T460 20FM, 20FN Not Affected   11/19/2019
ThinkPad T460p 20FW, 20FX Not Affected   11/19/2019
ThinkPad T460s 20F9, 20FA Not Affected   11/19/2019
ThinkPad T470 20HD, 20HE N1QET86W https://pcsupport.lenovo.com/downloads/DS120429 1/15/2020
ThinkPad T470 20JM, 20JN N1QET86W https://pcsupport.lenovo.com/downloads/DS120429 1/15/2020
ThinkPad T470p 20J6, 20J7 R0FET50W https://support.lenovo.com/downloads/DS120707 5/21/2020
ThinkPad T470s 20HF, 20HG N1WET57W https://pcsupport.lenovo.com/downloads/DS120418 1/15/2020
ThinkPad T470s 20JS, 20JT N1WET57W https://pcsupport.lenovo.com/downloads/DS120418 1/15/2020
ThinkPad T480 20L5, 20L6 N24ET54W https://pcsupport.lenovo.com/downloads/DS502355 1/15/2020
ThinkPad T480s 20L7, 20L8 N22ET60W https://pcsupport.lenovo.com/downloads/DS502226 1/15/2020
ThinkPad T490 20N2, 20N3 N2IET82W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20N2-20N3/downloads/DS539061 3/15/2021
ThinkPad T490 20Qx N2IET82W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20Q9-20QH/downloads/DS539061 3/15/2021
ThinkPad T490 20RY, 20RX N2RET14W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20Q9-20QH/downloads/DS539061 3/15/2021
ThinkPad T490s 20NX, 20NY N2JET84W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490S-TYPE-20NX-20NY/downloads/DS539062 3/15/2021
ThinkPad T495 20NJ, 20NK R12ET51W https://support.lenovo.com/downloads/DS539877 5/21/2020
ThinkPad T495S 20QJ,20QK R13ET43W https://support.lenovo.com/downloads/DS540046 5/21/2020
ThinkPad T540/T540p 20BE, 20BF Not Affected   11/19/2019
ThinkPad T550 20CJ, 20CK Not Affected   11/19/2019
ThinkPad T560 20FH, 20FJ Not Affected   11/19/2019
ThinkPad T570 20H9, 20HA N1VET52W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T570/downloads/DS120369 3/15/2021
ThinkPad T570 20JW, 20JX N1VET52W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T570-TYPE-20JW--20JX/downloads/DS120369 3/15/2021
ThinkPad T580 20L9, 20LA N27ET38W https://pcsupport.lenovo.com/downloads/DS502394 12/28/2019
ThinkPad T590 20N4, 20N5 N2IET82W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20N2-20N3/downloads/DS539061 3/15/2021
ThinkPad Tablet 10 (32-bit) 20C1, 20C3 Not Affected   11/19/2019
ThinkPad Tablet 10 (64-bit) 20C1, 20C3 Not Affected   11/19/2019
ThinkPad Tablet 8 (32-bit) 20BN, 20BQ Not Affected   11/19/2019
ThinkPad Tablet 8 (64-bit) 20BN, 20BQ Not Affected   11/19/2019
ThinkPad W540/W541 20BG, 20BG, 20EF, 20EG Not Affected   11/19/2019
ThinkPad W550s 20E1, 20E2 Not Affected   11/19/2019
ThinkPad X1 Carbon 3nd Gen 20A7, 20A8 Not Affected   11/19/2019
ThinkPad X1 Carbon 3rd Gen 20BS, 20BT Not Affected   11/19/2019
ThinkPad X1 Carbon 5th Gen (KBL) 20HR, 20HQ N1MET59W https://pcsupport.lenovo.com/downloads/DS120390 12/28/2019
ThinkPad X1 Carbon 5th Gen (SKL) 20K3, 20K4 N1MET59W https://pcsupport.lenovo.com/downloads/DS120390 12/28/2019
ThinkPad X1 Carbon 6th Gen 20KH, 20KG N23ET69W https://pcsupport.lenovo.com/downloads/DS502281 1/15/2020
ThinkPad X1 Carbon 7th Gen 20QD, 20QE, 20R1, 20R2 N2HET42W https://pcsupport.lenovo.com/downloads/DS540232 12/12/2019
ThinkPad X1 Carbon, X1 Yoga 4th Gen 20FB, 20FC, 20FQ, 20FR Not Affected   11/19/2019
ThinkPad X1 Extreme 20MF, 20MG N2EET45W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X1-EXTREME/downloads/DS504956 3/15/2021
ThinkPad X1 Extreme 20Qx N2OET42W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X1-EXTREME-GEN-2/downloads/DS540308 3/15/2021
ThinkPad X1 Tablet 20GG, 20GH Not Affected   11/19/2019
ThinkPad X1 Tablet 20JB, 20JC N1OET51W https://pcsupport.lenovo.com/us/en/products/TABLETS/THINKPAD-TABLET-SERIES/THINKPAD-X1-TABLET-TYPE-20JB-20JC/downloads/DS120971 3/15/2021
ThinkPad X1 Tablet 20KJ, 20KK N1ZET79W https://pcsupport.lenovo.com/downloads/DS502599 1/15/2020
ThinkPad X1 Yoga 20JD, 20JE, 20JF, 20JG N1NET49W https://pcsupport.lenovo.com/downloads/DS121063 1/15/2020
ThinkPad X1 Yoga 20LD, 20LE, 20LF, 20LG N25ET52W https://pcsupport.lenovo.com/downloads/DS502366 1/15/2020
ThinkPad X1 Yoga 4th Gen 20QF, 20QG, 20SA, 20SB N2HET42W https://pcsupport.lenovo.com/downloads/DS540232 12/12/2019
ThinkPad X131e (Intel) 336x, 337x Not Affected   11/19/2019
ThinkPad X140e (AMD) 20BL, 20BM Not Affected   11/19/2019
ThinkPad X240 20AL, 20AM Not Affected   11/19/2019
ThinkPad X240s 20AJ, 20AK Not Affected   11/19/2019
ThinkPad X250 20CL, 20CM Not Affected   11/19/2019
ThinkPad X260 20F5, 20F6 Not Affected   11/19/2019
ThinkPad X270 20HN, 20HM R0IET59W https://support.lenovo.com/downloads/DS120442 5/21/2020
ThinkPad X270 20K5, 20K6 Not Affected   11/19/2019
ThinkPad X280 20KE, 20KF N20ET50W https://pcsupport.lenovo.com/downloads/DS502324 12/28/2019
ThinkPad X380 Yoga 20LH, 20LJ R0SET49W https://support.lenovo.com/downloads/DS502333 5/21/2020
ThinkPad X390 20Q0, 20Q1 N2JET84W https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X390/downloads/DS539062 3/15/2021
ThinkPad X390 Yoga 20NN, 20NQ N2LET71W https://pcsupport.lenovo.com/downloads/DS539544 12/28/2019
ThinkPad X395 20NL,20NM R13ET43W https://support.lenovo.com/downloads/DS540046 5/21/2020
ThinkPad Yoga 11e 20D9, 20DA Not Affected   11/19/2019
ThinkPad Yoga 260, S1 20FD, 20FE, 20GS, 20GT Not Affected   11/19/2019
ThinkPad Yoga 370 /ThinkPad S1 3rd 20JH, 20JJ R0HET55W https://support.lenovo.com/downloads/DS120869 5/21/2020

 

 

 

 


Alias Id:LEN-29406
Document ID:PS500286
Original Publish Date:11/09/2019
Last Modified Date:07/15/2021