High severity7.0NVD Advisory· Published May 21, 2021· Updated Jun 17, 2026

CVE-2020-27212

Description

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection (RDP) can be degraded from RDP level 2 (no access via debug interface) to level 1 (limited access via debug interface) by injecting a fault during the boot phase.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

St/Stm32cubel4 Firmware
cpe:2.3:o:st:stm32cubel4_firmware:*:*:*:*:*:*:*:*
Range: <=1.16.0
STMicroelectronics/STM32L4description
LG Electronics/STM32L4llm-create
Range: <=2020-10-19

Patches

Vulnerability mechanics

References

eprint.iacr.org/2021/640nvdThird Party Advisory
www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.htmlnvdThird Party Advisory
www.aisec.fraunhofer.de/en/FirmwareProtection.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000