ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability
ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability
ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability
Lenovo Security Advisory: LEN-29406
Potential Impact: Information Disclosure
Severity: High
Scope of Impact: Industry-wide
CVE Identifier: CVE-2019-16863
Summary Description:
ST Microelectronics has reported a vulnerability in the implementation of the Elliptic Digital Signature Algorithm (ECDSA) signature generation function that could result in exposing the private key.
Mitigation Strategy for Customers (what you should do to protect yourself):
ST Microelectronics recommends updating your firmware to the latest version (or newer) indicated for your model in the Product Impact section below.
Please click for more info.
Desktop - All in One - Not Affected
Networking Switches - Not Affected
Storage - Not Affected
System x -Lenovo - Not Affected
System x (IBM) - Not Affected
ThinkServer - Not Affected
ThinkStation - Not Affected
ThinkSystem - Not Affected
References:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024
https://www.catalog.update.microsoft.com/Search.aspx?q=Lenovo%20STM
Revision History:
Revision | Date | Description |
---|---|---|
15 | 2021-04-19 | Updated ThinkPad mitigation |
14 | 2021-03-15 | Updated ThinkPad |
13 | 2020-09-09 | Corrected fix version/link for ThinkPad L480/L580 |
12 | 2020-06-25 | Updated IdeaPad |
11 | 2020-05-21 | Updated ThinkPad |
10 | 2020-04-12 | Updated ThinkPad |
9 | 2020-03-19 | Updated ThinkPad |
8 | 2020-02-21 | Updated ThinkPad |
7 | 2020-02-08 | Updated ThinkPad |
6 | 2020-01-30 | Updated ThinkPad |
5 | 2020-01-15 | Updated ThinkPad and Desktop |
4 | 2019-12-28 | Updated ThinkPad |
3 | 2019-12-12 | Updated ThinkPad |
2 | 2019-11-22 | Updated ThinkPad |
1 | 2019-11-19 | Initial release |
For a complete list of all Lenovo Product Security Advisories, click here.
For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.
Product Impact:
Only the following Desktop is affected:
Product | Minimum Fix Version | Download Link | Last Updated |
ThinkCentre M90n-1 | M2ATPM7364 | https://support.lenovo.com/downloads/DS542703 | 2020-01-15 |
Only the following Lenovo IdeaPad Notebooks are affected:
ThinkBook 13s-IWL | 9YCN47WW | https://support.lenovo.com/downloads/DS539962 | 2020-06-25 |
ThinkBook 14s-IWL | 9YCN47WW | https://support.lenovo.com/downloads/DS539962 | 2020-06-25 |
V540s-13/14 | 9YCN48WW | https://newsupport.lenovo.com.cn/driveDownloads_detail.html?driveId=72347 | 2020-06-25 |
昭阳K3/K4-IWL | 9YCN48WW | https://newsupport.lenovo.com.cn/driveDownloads_detail.html?driveId=72347 | 2020-06-25 |
Follow the steps below for ThinkPad products:
- Update the system BIOS to the version level of “Minimum Version Required to Fix” as indicated in the below table.
- Update to the latest ST Micro TPM firmware version (or later) as described in the ST Micro advisory found here.
- For Windows: Update via Windows Updates or by manually downloading and installing the appropriate TPM firmware package from the Microsoft Update Catalog. To verify the firmware version, run get-tpm from an administrative Powershell prompt.
- For Linux: Follow update guidance found here.
Product | Model | Minimum Fix Version | Download Link | Last Updated |
ThinkPad 10 | 20E3, 20E4 | Not Affected | 11/19/2019 | |
ThinkPad 11e/Yoga 11e 3RD GEN | 20G9, 20GB, 20G8, 20GA | Not Affected | 11/19/2019 | |
ThinkPad 11e/Yoga 11e 4TH GEN (APL) | 20HT, 20HV, 20HS, 20HU | Not Affected | 5/21/2020 | |
ThinkPad 11e/Yoga 11e 4TH GEN (KBL) | 20HT, 20HV, 20HS, 20HU | R0LET34W | https://support.lenovo.com/downloads/DS120787 | 5/21/2020 |
ThinkPad 11e/Yoga 11e 5TH GEN (GML) | 20LR, 20LQ, 20LN, 20LM | R0TET62W | https://support.lenovo.com/downloads/DS502469 | 5/21/2020 |
ThinkPad 11e/Yoga 11e 5TH GEN (KBY-Y) | 20LR, 20LQ, 20LN, 20LM | R0VET36W | https://support.lenovo.com/downloads/ds503833 | 5/21/2020 |
ThinkPad 13 (KBL) | 20J1, 20J2 | R0JET40W | https://support.lenovo.com/downloads/DS119785 | 5/21/2020 |
ThinkPad A275 | 20KC, 20KD | R0NET43W | https://support.lenovo.com/downloads/DS502469 | 5/21/2020 |
ThinkPad A285 | 20MW, 20MX | R0XET67W | https://support.lenovo.com/downloads/DS504873 | 5/21/2020 |
ThinkPad A475 | 20KL, 20KM | R04ET42W | https://support.lenovo.com/downloads/DS500949 | 5/21/2020 |
ThinkPad A485 | 20MU, 20MV | R0WET63W | https://support.lenovo.com/downloads/DS504078 | 5/21/2020 |
ThinkPad E450/E450c/E550/E550c | 20DC, 20DD, 30EH, 20DF, 20DG, 20E0 | Not Affected | 11/19/2019 | |
ThinkPad E460/E560 | 20ET, 20EU, 20EV, 20EW | Not Affected | 11/19/2019 | |
ThinkPad E470/E570 | 20H1, 20H2, 20H5, 20H6 | R0DETA0W | https://support.lenovo.com/downloads/DS119160 | 5/21/2020 |
ThinkPad E475/E575 | 20H4, 20H8 | R0EET50W | https://support.lenovo.com/downloads/DS119276 | 5/21/2020 |
ThinkPad E480/E580 | 20KN, 20KQ, 20KS, 20KT | R0PET63W | https://support.lenovo.com/downloads/DS501843 | 5/21/2020 |
ThinkPad E485/E585 | 20KU, 20KV | R0UET77W | https://support.lenovo.com/downloads/DS503790 | 5/21/2020 |
ThinkPad E490s /ThinkPad S3/ ThinkPad E490/E590/R490/R590 | 20N8, 20N9, 20NG | R0YET41W | https://support.lenovo.com/downloads/DS506071 | 5/21/2020 |
ThinkPad E570 / ThinkPad S5 | 20H5, 20H6 | R0DETA0W | https://support.lenovo.com/downloads/DS119160 | 5/21/2020 |
ThinkPad Helix | 20CG, 20CH | Not Affected | 11/19/2019 | |
ThinkPad Helix | 3XXX | Not Affected | 11/19/2019 | |
ThinkPad L380 / S3 3rd Gen ThinkPad L380 Yoga / S2 Yoga 3rd Gen |
20M5, 20M6, 20M7, 20M8 | R0RET40W | https://pcsupport.lenovo.com/us/zh/products/LAPTOPS-AND-NETBOOKS/THINKPAD-L-SERIES-LAPTOPS/THINKPAD-L380-TYPE-20M5-20M6/downloads/DS502400 | 3/15/2021 |
ThinkPad L390 Yoga /ThinkPad S2 Yoga 4th Gen | 20NR, 20NS, 20NT, 20NU | R10ET43W | https://support.lenovo.com/downloads/DS505882 | 5/21/2020 |
ThinkPad L450 | 20DS, 20DT | Not Affected | 11/19/2019 | |
ThinkPad L460 | 20FU, 20FV | Not Affected | 11/19/2019 | |
ThinkPad L470 | 20J4, 20J5 | R0GET71W | https://support.lenovo.com/downloads/DS120327 | 5/21/2020 |
ThinkPad L470 | 20JU, 20JV | Not Affected | 11/19/2019 | |
ThinkPad L480/L580 | 20LS, 20LT, 20L2, 20LX | R0QET60W | https://support.lenovo.com/downloads/DS502442 | 9/9/2020 |
ThinkPad L490/L590 | 20Q5, 20Q6, 20Q7, 20Q8 | R0ZET39W | https://support.lenovo.com/downloads/DS540054 | 5/21/2020 |
ThinkPad L560 | 20F1, 20F2 | Not Affected | 11/19/2019 | |
ThinkPad L570 | 20JQ, 20JR | N1XET68W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-L-SERIES-LAPTOPS/THINKPAD-L570-TYPE-20J8-20J9/downloads/DS120885 | 3/15/2021 |
ThinkPad P1 | 20MD, 20ME | N2EET45W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P1-TYPE-20MD-20ME/downloads/DS504956 | 3/15/2021 |
ThinkPad P1 | 20Qx | N2OET42W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P1-GEN-2-TYPE-20QT-20QU/downloads/DS540308 | 3/15/2021 |
ThinkPad P43s | 20Rx | N2IET82W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P43S-TYPE-20RH-20RJ/downloads/DS539061 | 3/15/2021 |
ThinkPad P50 | 20EN, 20EQ | Not Affected | 11/19/2019 | |
ThinkPad P50s | 20FK, 20FL | Not Affected | 11/19/2019 | |
ThinkPad P51 | 20HH, 20HJ | N1UET77W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51-TYPE-20HH-20HJ/downloads/DS121296 | 3/15/2021 |
ThinkPad P51 | 20MM, 20MN | N1UET77W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51-TYPE-20HH-20HJ/downloads/DS121296 | 3/15/2021 |
ThinkPad P51s | 20HB, 20HC | N1VET52W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51S-TYPE-20HB-20HC/downloads/DS120369 | 3/15/2021 |
ThinkPad P51s | 20JY, 20K0 | N1VET52W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P51S-TYPE-20JY-20K0/downloads/DS120369 | 3/15/2021 |
ThinkPad P52 | 20M9, 20MA | N2CET50W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P52-TYPE-20M9-20MA/downloads/DS504024 | 3/15/2021 |
ThinkPad P52s | 20LB, 20LC | N27ET38W | https://pcsupport.lenovo.com/downloads/DS502394 | 12/28/2019 |
ThinkPad P70 | 20ER, 20ES | Not Affected | 11/19/2019 | |
ThinkPad P71 | 20HK, 20HL | N1TET56W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P71/downloads/DS121301 | 3/15/2021 |
ThinkPad P72 | 20MB, 20MC | N2CET50W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P72-TYPE-20MB-20MC/downloads/DS504024 | 3/15/2021 |
ThinkPad P73 | 20Qx | N2NET35W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-P-SERIES-LAPTOPS/THINKPAD-P73-TYPE-20QR-20QS/downloads/DS540999 | 3/15/2021 |
ThinkPad S1 Yoga (Non-vPro) | Not Affected | 11/19/2019 | ||
ThinkPad S1 Yoga (vPro) | Not Affected | 11/19/2019 | ||
ThinkPad S5 2nd Generation | 20JA | Not Affected | 11/19/2019 | |
ThinkPad S5 2nd Generation | 20JA | Not Affected | 5/21/2020 | |
ThinkPad S5 Yoga 15 | 20DQ, 20DR | Not Affected | 11/19/2019 | |
ThinkPad S5/E560p | 20G5,20G4 | Not Affected | 11/19/2019 | |
ThinkPad S531 | 20B0 | Not Affected | 11/19/2019 | |
ThinkPad S540 | 20B3 | Not Affected | 11/19/2019 | |
ThinkPad T25 | 20K7 | N1QET86W | https://pcsupport.lenovo.com/downloads/DS120429 | 1/15/2020 |
ThinkPad T440/T440s | 20B6, 20B7, 20AQ, 20AR | Not Affected | 11/19/2019 | |
ThinkPad T440p | 20AN, 20AW | Not Affected | 11/19/2019 | |
ThinkPad T450/T450s | 20BU, 20BV, 20DJ, 20BW, 20BX | Not Affected | 11/19/2019 | |
ThinkPad T450/T450s | 20BU, 20BV, 20DJ, 20BW, 20BX | Not Affected | 11/19/2019 | |
ThinkPad T460 | 20FM, 20FN | Not Affected | 11/19/2019 | |
ThinkPad T460p | 20FW, 20FX | Not Affected | 11/19/2019 | |
ThinkPad T460s | 20F9, 20FA | Not Affected | 11/19/2019 | |
ThinkPad T470 | 20HD, 20HE | N1QET86W | https://pcsupport.lenovo.com/downloads/DS120429 | 1/15/2020 |
ThinkPad T470 | 20JM, 20JN | N1QET86W | https://pcsupport.lenovo.com/downloads/DS120429 | 1/15/2020 |
ThinkPad T470p | 20J6, 20J7 | R0FET50W | https://support.lenovo.com/downloads/DS120707 | 5/21/2020 |
ThinkPad T470s | 20HF, 20HG | N1WET57W | https://pcsupport.lenovo.com/downloads/DS120418 | 1/15/2020 |
ThinkPad T470s | 20JS, 20JT | N1WET57W | https://pcsupport.lenovo.com/downloads/DS120418 | 1/15/2020 |
ThinkPad T480 | 20L5, 20L6 | N24ET54W | https://pcsupport.lenovo.com/downloads/DS502355 | 1/15/2020 |
ThinkPad T480s | 20L7, 20L8 | N22ET60W | https://pcsupport.lenovo.com/downloads/DS502226 | 1/15/2020 |
ThinkPad T490 | 20N2, 20N3 | N2IET82W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20N2-20N3/downloads/DS539061 | 3/15/2021 |
ThinkPad T490 | 20Qx | N2IET82W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20Q9-20QH/downloads/DS539061 | 3/15/2021 |
ThinkPad T490 | 20RY, 20RX | N2RET14W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20Q9-20QH/downloads/DS539061 | 3/15/2021 |
ThinkPad T490s | 20NX, 20NY | N2JET84W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490S-TYPE-20NX-20NY/downloads/DS539062 | 3/15/2021 |
ThinkPad T495 | 20NJ, 20NK | R12ET51W | https://support.lenovo.com/downloads/DS539877 | 5/21/2020 |
ThinkPad T495S | 20QJ,20QK | R13ET43W | https://support.lenovo.com/downloads/DS540046 | 5/21/2020 |
ThinkPad T540/T540p | 20BE, 20BF | Not Affected | 11/19/2019 | |
ThinkPad T550 | 20CJ, 20CK | Not Affected | 11/19/2019 | |
ThinkPad T560 | 20FH, 20FJ | Not Affected | 11/19/2019 | |
ThinkPad T570 | 20H9, 20HA | N1VET52W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T570/downloads/DS120369 | 3/15/2021 |
ThinkPad T570 | 20JW, 20JX | N1VET52W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T570-TYPE-20JW--20JX/downloads/DS120369 | 3/15/2021 |
ThinkPad T580 | 20L9, 20LA | N27ET38W | https://pcsupport.lenovo.com/downloads/DS502394 | 12/28/2019 |
ThinkPad T590 | 20N4, 20N5 | N2IET82W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-T-SERIES-LAPTOPS/THINKPAD-T490-TYPE-20N2-20N3/downloads/DS539061 | 3/15/2021 |
ThinkPad Tablet 10 (32-bit) | 20C1, 20C3 | Not Affected | 11/19/2019 | |
ThinkPad Tablet 10 (64-bit) | 20C1, 20C3 | Not Affected | 11/19/2019 | |
ThinkPad Tablet 8 (32-bit) | 20BN, 20BQ | Not Affected | 11/19/2019 | |
ThinkPad Tablet 8 (64-bit) | 20BN, 20BQ | Not Affected | 11/19/2019 | |
ThinkPad W540/W541 | 20BG, 20BG, 20EF, 20EG | Not Affected | 11/19/2019 | |
ThinkPad W550s | 20E1, 20E2 | Not Affected | 11/19/2019 | |
ThinkPad X1 Carbon 3nd Gen | 20A7, 20A8 | Not Affected | 11/19/2019 | |
ThinkPad X1 Carbon 3rd Gen | 20BS, 20BT | Not Affected | 11/19/2019 | |
ThinkPad X1 Carbon 5th Gen (KBL) | 20HR, 20HQ | N1MET59W | https://pcsupport.lenovo.com/downloads/DS120390 | 12/28/2019 |
ThinkPad X1 Carbon 5th Gen (SKL) | 20K3, 20K4 | N1MET59W | https://pcsupport.lenovo.com/downloads/DS120390 | 12/28/2019 |
ThinkPad X1 Carbon 6th Gen | 20KH, 20KG | N23ET69W | https://pcsupport.lenovo.com/downloads/DS502281 | 1/15/2020 |
ThinkPad X1 Carbon 7th Gen | 20QD, 20QE, 20R1, 20R2 | N2HET42W | https://pcsupport.lenovo.com/downloads/DS540232 | 12/12/2019 |
ThinkPad X1 Carbon, X1 Yoga 4th Gen | 20FB, 20FC, 20FQ, 20FR | Not Affected | 11/19/2019 | |
ThinkPad X1 Extreme | 20MF, 20MG | N2EET45W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X1-EXTREME/downloads/DS504956 | 3/15/2021 |
ThinkPad X1 Extreme | 20Qx | N2OET42W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X1-EXTREME-GEN-2/downloads/DS540308 | 3/15/2021 |
ThinkPad X1 Tablet | 20GG, 20GH | Not Affected | 11/19/2019 | |
ThinkPad X1 Tablet | 20JB, 20JC | N1OET51W | https://pcsupport.lenovo.com/us/en/products/TABLETS/THINKPAD-TABLET-SERIES/THINKPAD-X1-TABLET-TYPE-20JB-20JC/downloads/DS120971 | 3/15/2021 |
ThinkPad X1 Tablet | 20KJ, 20KK | N1ZET79W | https://pcsupport.lenovo.com/downloads/DS502599 | 1/15/2020 |
ThinkPad X1 Yoga | 20JD, 20JE, 20JF, 20JG | N1NET49W | https://pcsupport.lenovo.com/downloads/DS121063 | 1/15/2020 |
ThinkPad X1 Yoga | 20LD, 20LE, 20LF, 20LG | N25ET52W | https://pcsupport.lenovo.com/downloads/DS502366 | 1/15/2020 |
ThinkPad X1 Yoga 4th Gen | 20QF, 20QG, 20SA, 20SB | N2HET42W | https://pcsupport.lenovo.com/downloads/DS540232 | 12/12/2019 |
ThinkPad X131e (Intel) | 336x, 337x | Not Affected | 11/19/2019 | |
ThinkPad X140e (AMD) | 20BL, 20BM | Not Affected | 11/19/2019 | |
ThinkPad X240 | 20AL, 20AM | Not Affected | 11/19/2019 | |
ThinkPad X240s | 20AJ, 20AK | Not Affected | 11/19/2019 | |
ThinkPad X250 | 20CL, 20CM | Not Affected | 11/19/2019 | |
ThinkPad X260 | 20F5, 20F6 | Not Affected | 11/19/2019 | |
ThinkPad X270 | 20HN, 20HM | R0IET59W | https://support.lenovo.com/downloads/DS120442 | 5/21/2020 |
ThinkPad X270 | 20K5, 20K6 | Not Affected | 11/19/2019 | |
ThinkPad X280 | 20KE, 20KF | N20ET50W | https://pcsupport.lenovo.com/downloads/DS502324 | 12/28/2019 |
ThinkPad X380 Yoga | 20LH, 20LJ | R0SET49W | https://support.lenovo.com/downloads/DS502333 | 5/21/2020 |
ThinkPad X390 | 20Q0, 20Q1 | N2JET84W | https://pcsupport.lenovo.com/us/en/products/LAPTOPS-AND-NETBOOKS/THINKPAD-X-SERIES-LAPTOPS/THINKPAD-X390/downloads/DS539062 | 3/15/2021 |
ThinkPad X390 Yoga | 20NN, 20NQ | N2LET71W | https://pcsupport.lenovo.com/downloads/DS539544 | 12/28/2019 |
ThinkPad X395 | 20NL,20NM | R13ET43W | https://support.lenovo.com/downloads/DS540046 | 5/21/2020 |
ThinkPad Yoga 11e | 20D9, 20DA | Not Affected | 11/19/2019 | |
ThinkPad Yoga 260, S1 | 20FD, 20FE, 20GS, 20GT | Not Affected | 11/19/2019 | |
ThinkPad Yoga 370 /ThinkPad S1 3rd | 20JH, 20JJ | R0HET55W | https://support.lenovo.com/downloads/DS120869 | 5/21/2020 |
Your feedback helps to improve the overall experience