CVE:CVE-2019-16863
CNNVD:CNNVD-201911-808
STMicroelectronics ST33TPHF2ESPI TPM是瑞士意法半导体（STMicroelectronics）公司的一款可信计算平台模块。
STMicroelectronics ST33TPHF2ESPI TPM 2019-09-12之前版本中存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。
solution:Upgrade st st33tphf2espi_firmware to a higher version than 71.0,71.4,71.12,73.0,73.4,73.8,and avoid the version 71.0,71.4,71.12,73.0,73.4,73.8; Upgrade st st33tphf2ei2c_firmware to a higher version than 73.5,73.9,and avoid the version 73.5,73.9; Upgrade st st33tphf20spi_firmware to a higher version than 74.0,74.4,74.8,74.16,and avoid the version 74.0,74.4,74.8,74.16; Upgrade st st33tphf20i2c_firmware to a higher version than 74.5,74.9,and avoid the version 74.5,74.9