5.9

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
InfineonTrusted Platform Firmware Version4.31
   AcerC720 Chromebook Version-
   AcerChromebase Version-
   AcerChromebase 24 Version-
   AcerChromebook 11 C730 Version-
   AcerChromebook 11 C730e Version-
   AcerChromebook 11 C735 Version-
   AcerChromebook 11 C740 Version-
   AcerChromebook 11 C771 Version-
   AcerChromebook 11 C771t Version-
   AcerChromebook 11 N7 C731 Version-
   AcerChromebook 13 Cb5-311 Version-
   AcerChromebook 14 Cb3-431 Version-
   AcerChromebook 14 For Work Cp5-471 Version-
   AcerChromebook 15 Cb3-531 Version-
   AcerChromebook 15 Cb3-532 Version-
   AcerChromebook 15 Cb5-571 Version-
   AcerChromebook R11 Version-
   AcerChromebook R13 Cb5-312t Version-
   AcerChromebox Version-
   AcerChromebox Cxi2 Version-
   AopenChromebase Version- Editioncommercial
   AopenChromebase Version- Editionmini
   AopenChromebox Version- Editioncommercial
   AopenChromeboxi Version- Editionmini
   AsiChromebook Version-
   AsusChromebit Cs10 Version-
   AsusChromebook C200 Version-
   AsusChromebook C201pa Version-
   AsusChromebook C202sa Version-
   AsusChromebook C300 Version-
   AsusChromebook C300sa Version-
   AsusChromebook C301sa Version-
   AsusChromebook Flip C100pa Version-
   AsusChromebook Flip C302 Version-
   AsusChromebox Cn60 Version-
   AsusChromebox Cn62 Version-
   BobicusChromebook 11
   CtlJ2 Chromebook Version- SwPlatformeducation
   CtlJ4 Chromebook Version- SwPlatformeducation
   CtlJ5 Chromebook Version-
   CtlN6 Chromebook Version- SwPlatformeducation
   CtlNl61 Chromebook Version-
   DellChromebook 11 Version-
   DellChromebook 11 3120 Version-
   DellChromebook 11 3189 Version-
   DellChromebook 11 Model 3180 Version-
   DellChromebook 13 3380 Version-
   DellChromebox Version-
   EdugearChromebook K Version-
   EdugearChromebook M Version-
   EdugearChromebook R Version-
   EdugearCmt Chromebook Version-
   EdxisChromebook Version-
   EdxisEducation Chromebook Version-
   EpikChromebook Elb1101 Version-
   GooglePixel Version-
   HaierChromebook 11 Version-
   HaierChromebook 11 C Version-
   HaierChromebook 11 G2 Version-
   HaierChromebook 11e Version-
   HexaChromebook Pi Version-
   HisenseChromebook 11 Version-
   HpChromebook Version- SwPlatformmeetings
   HpChromebook 11-vxxx Version-
   HpChromebook 11 1100-1199 Version-
   HpChromebook 11 2000-2099 Version-
   HpChromebook 11 2100-2199 Version-
   HpChromebook 11 2200-2299 Version-
   HpChromebook 11 G1 Version-
   HpChromebook 11 G2 Version-
   HpChromebook 11 G3 Version-
   HpChromebook 11 G5 Version-
   HpChromebook 11 G5 Ee Version-
   HpChromebook 13 G1 Version-
   HpChromebook 14 Version-
   HpChromebook 14 Ak000-099 Version-
   HpChromebook 14 G3 Version-
   HpChromebook 14 G4 Version-
   HpChromebook 14 X000-x999 Version-
   HpChromebox G1 Version-
   Lenovo100s Chromebook Version-
   LenovoN20 Chromebook Version-
   LenovoN21 Chromebook Version-
   LenovoN22 Chromebook Version-
   LenovoN23 Chromebook Version-
   LenovoN23 Flex 11 Chromebook Version-
   LenovoN23 Yoga 11 Chromebook Version-
   LenovoN42 Chromebook Version-
   LenovoThinkcentre Chromebox Version-
   LenovoThinkpad 11e Chromebook Version-
   LenovoThinkpad 13 Chromebook Version-
   LgChromebase 22cb25s Version-
   LgChromebase 22cv241 Version-
   MedionAkoya S2013 Version-
   MedionChromebook S2015 Version-
   MercerChromebook Version-
   MercerV2 Chromebook Version-
   NcomputingChromebook Cx100 Version-
   NexianChromebook Version-
   PcmergeChromebook Pcm-116t-432b Version-
   Poin2Chromebook 11 Version-
   Poin2Chromebook 14 Version-
   PositivoChromebook Ch1190 Version-
   ProwiseEntry Line Chromebook Version-
   ProwiseProline Chromebook Version-
   RgsEducation Chromebook Version-
   SamsungChromebook 2 11 Version-
   SamsungChromebook 2 11 Xe500c12 Version-
   SamsungChromebook 2 13 Version-
   SamsungChromebook 3 Version-
   SamsungChromebook Plus Version-
   SamsungChromebook Pro Version-
   Sector-fiveE1 Rugged Chromebook Version-
   SenkatelC1101 Chromebook Version-
   ToshibaChromebook Version-
   ToshibaChromebook 2 Version-
   ToshibaChromebook 2 Version- Edition2015
   TrueIdc Chromebook Version-
   TrueIdc Chromebook 11 Version-
   VideonetChromebook Version-
   VideonetChromebook Bl10 Version-
   ViglenChromebook 11 Version-
   ViglenChromebook 360 Version-
   XoloChromebook Version-
InfineonTrusted Platform Firmware Version4.32
   AcerC720 Chromebook Version-
   AcerChromebase Version-
   AcerChromebase 24 Version-
   AcerChromebook 11 C730 Version-
   AcerChromebook 11 C730e Version-
   AcerChromebook 11 C735 Version-
   AcerChromebook 11 C740 Version-
   AcerChromebook 11 C771 Version-
   AcerChromebook 11 C771t Version-
   AcerChromebook 11 N7 C731 Version-
   AcerChromebook 13 Cb5-311 Version-
   AcerChromebook 14 Cb3-431 Version-
   AcerChromebook 14 For Work Cp5-471 Version-
   AcerChromebook 15 Cb3-531 Version-
   AcerChromebook 15 Cb3-532 Version-
   AcerChromebook 15 Cb5-571 Version-
   AcerChromebook R11 Version-
   AcerChromebook R13 Cb5-312t Version-
   AcerChromebox Version-
   AcerChromebox Cxi2 Version-
   AopenChromebase Version- Editioncommercial
   AopenChromebase Version- Editionmini
   AopenChromebox Version- Editioncommercial
   AopenChromeboxi Version- Editionmini
   AsiChromebook Version-
   AsusChromebit Cs10 Version-
   AsusChromebook C200 Version-
   AsusChromebook C201pa Version-
   AsusChromebook C202sa Version-
   AsusChromebook C300 Version-
   AsusChromebook C300sa Version-
   AsusChromebook C301sa Version-
   AsusChromebook Flip C100pa Version-
   AsusChromebook Flip C302 Version-
   AsusChromebox Cn60 Version-
   AsusChromebox Cn62 Version-
   BobicusChromebook 11
   CtlJ2 Chromebook Version- SwPlatformeducation
   CtlJ4 Chromebook Version- SwPlatformeducation
   CtlJ5 Chromebook Version-
   CtlN6 Chromebook Version- SwPlatformeducation
   CtlNl61 Chromebook Version-
   DellChromebook 11 Version-
   DellChromebook 11 3120 Version-
   DellChromebook 11 3189 Version-
   DellChromebook 11 Model 3180 Version-
   DellChromebook 13 3380 Version-
   DellChromebox Version-
   EdugearChromebook K Version-
   EdugearChromebook M Version-
   EdugearChromebook R Version-
   EdugearCmt Chromebook Version-
   EdxisChromebook Version-
   EdxisEducation Chromebook Version-
   EpikChromebook Elb1101 Version-
   GooglePixel Version-
   HaierChromebook 11 Version-
   HaierChromebook 11 C Version-
   HaierChromebook 11 G2 Version-
   HaierChromebook 11e Version-
   HexaChromebook Pi Version-
   HisenseChromebook 11 Version-
   HpChromebook Version- SwPlatformmeetings
   HpChromebook 11-vxxx Version-
   HpChromebook 11 1100-1199 Version-
   HpChromebook 11 2000-2099 Version-
   HpChromebook 11 2100-2199 Version-
   HpChromebook 11 2200-2299 Version-
   HpChromebook 11 G1 Version-
   HpChromebook 11 G2 Version-
   HpChromebook 11 G3 Version-
   HpChromebook 11 G5 Version-
   HpChromebook 11 G5 Ee Version-
   HpChromebook 13 G1 Version-
   HpChromebook 14 Version-
   HpChromebook 14 Ak000-099 Version-
   HpChromebook 14 G3 Version-
   HpChromebook 14 G4 Version-
   HpChromebook 14 X000-x999 Version-
   HpChromebox G1 Version-
   Lenovo100s Chromebook Version-
   LenovoN20 Chromebook Version-
   LenovoN21 Chromebook Version-
   LenovoN22 Chromebook Version-
   LenovoN23 Chromebook Version-
   LenovoN23 Flex 11 Chromebook Version-
   LenovoN23 Yoga 11 Chromebook Version-
   LenovoN42 Chromebook Version-
   LenovoThinkcentre Chromebox Version-
   LenovoThinkpad 11e Chromebook Version-
   LenovoThinkpad 13 Chromebook Version-
   LgChromebase 22cb25s Version-
   LgChromebase 22cv241 Version-
   MedionAkoya S2013 Version-
   MedionChromebook S2015 Version-
   MercerChromebook Version-
   MercerV2 Chromebook Version-
   NcomputingChromebook Cx100 Version-
   NexianChromebook Version-
   PcmergeChromebook Pcm-116t-432b Version-
   Poin2Chromebook 11 Version-
   Poin2Chromebook 14 Version-
   PositivoChromebook Ch1190 Version-
   ProwiseEntry Line Chromebook Version-
   ProwiseProline Chromebook Version-
   RgsEducation Chromebook Version-
   SamsungChromebook 2 11 Version-
   SamsungChromebook 2 11 Xe500c12 Version-
   SamsungChromebook 2 13 Version-
   SamsungChromebook 3 Version-
   SamsungChromebook Plus Version-
   SamsungChromebook Pro Version-
   Sector-fiveE1 Rugged Chromebook Version-
   SenkatelC1101 Chromebook Version-
   ToshibaChromebook Version-
   ToshibaChromebook 2 Version-
   ToshibaChromebook 2 Version- Edition2015
   TrueIdc Chromebook Version-
   TrueIdc Chromebook 11 Version-
   VideonetChromebook Version-
   VideonetChromebook Bl10 Version-
   ViglenChromebook 11 Version-
   ViglenChromebook 360 Version-
   XoloChromebook Version-
InfineonTrusted Platform Firmware Version6.40
   AcerC720 Chromebook Version-
   AcerChromebase Version-
   AcerChromebase 24 Version-
   AcerChromebook 11 C730 Version-
   AcerChromebook 11 C730e Version-
   AcerChromebook 11 C735 Version-
   AcerChromebook 11 C740 Version-
   AcerChromebook 11 C771 Version-
   AcerChromebook 11 C771t Version-
   AcerChromebook 11 N7 C731 Version-
   AcerChromebook 13 Cb5-311 Version-
   AcerChromebook 14 Cb3-431 Version-
   AcerChromebook 14 For Work Cp5-471 Version-
   AcerChromebook 15 Cb3-531 Version-
   AcerChromebook 15 Cb3-532 Version-
   AcerChromebook 15 Cb5-571 Version-
   AcerChromebook R11 Version-
   AcerChromebook R13 Cb5-312t Version-
   AcerChromebox Version-
   AcerChromebox Cxi2 Version-
   AopenChromebase Version- Editioncommercial
   AopenChromebase Version- Editionmini
   AopenChromebox Version- Editioncommercial
   AopenChromeboxi Version- Editionmini
   AsiChromebook Version-
   AsusChromebit Cs10 Version-
   AsusChromebook C200 Version-
   AsusChromebook C201pa Version-
   AsusChromebook C202sa Version-
   AsusChromebook C300 Version-
   AsusChromebook C300sa Version-
   AsusChromebook C301sa Version-
   AsusChromebook Flip C100pa Version-
   AsusChromebook Flip C302 Version-
   AsusChromebox Cn60 Version-
   AsusChromebox Cn62 Version-
   BobicusChromebook 11
   CtlJ2 Chromebook Version- SwPlatformeducation
   CtlJ4 Chromebook Version- SwPlatformeducation
   CtlJ5 Chromebook Version-
   CtlN6 Chromebook Version- SwPlatformeducation
   CtlNl61 Chromebook Version-
   DellChromebook 11 Version-
   DellChromebook 11 3120 Version-
   DellChromebook 11 3189 Version-
   DellChromebook 11 Model 3180 Version-
   DellChromebook 13 3380 Version-
   DellChromebox Version-
   EdugearChromebook K Version-
   EdugearChromebook M Version-
   EdugearChromebook R Version-
   EdugearCmt Chromebook Version-
   EdxisChromebook Version-
   EdxisEducation Chromebook Version-
   EpikChromebook Elb1101 Version-
   GooglePixel Version-
   HaierChromebook 11 Version-
   HaierChromebook 11 C Version-
   HaierChromebook 11 G2 Version-
   HaierChromebook 11e Version-
   HexaChromebook Pi Version-
   HisenseChromebook 11 Version-
   HpChromebook Version- SwPlatformmeetings
   HpChromebook 11-vxxx Version-
   HpChromebook 11 1100-1199 Version-
   HpChromebook 11 2000-2099 Version-
   HpChromebook 11 2100-2199 Version-
   HpChromebook 11 2200-2299 Version-
   HpChromebook 11 G1 Version-
   HpChromebook 11 G2 Version-
   HpChromebook 11 G3 Version-
   HpChromebook 11 G5 Version-
   HpChromebook 11 G5 Ee Version-
   HpChromebook 13 G1 Version-
   HpChromebook 14 Version-
   HpChromebook 14 Ak000-099 Version-
   HpChromebook 14 G3 Version-
   HpChromebook 14 G4 Version-
   HpChromebook 14 X000-x999 Version-
   HpChromebox G1 Version-
   Lenovo100s Chromebook Version-
   LenovoN20 Chromebook Version-
   LenovoN21 Chromebook Version-
   LenovoN22 Chromebook Version-
   LenovoN23 Chromebook Version-
   LenovoN23 Flex 11 Chromebook Version-
   LenovoN23 Yoga 11 Chromebook Version-
   LenovoN42 Chromebook Version-
   LenovoThinkcentre Chromebox Version-
   LenovoThinkpad 11e Chromebook Version-
   LenovoThinkpad 13 Chromebook Version-
   LgChromebase 22cb25s Version-
   LgChromebase 22cv241 Version-
   MedionAkoya S2013 Version-
   MedionChromebook S2015 Version-
   MercerChromebook Version-
   MercerV2 Chromebook Version-
   NcomputingChromebook Cx100 Version-
   NexianChromebook Version-
   PcmergeChromebook Pcm-116t-432b Version-
   Poin2Chromebook 11 Version-
   Poin2Chromebook 14 Version-
   PositivoChromebook Ch1190 Version-
   ProwiseEntry Line Chromebook Version-
   ProwiseProline Chromebook Version-
   RgsEducation Chromebook Version-
   SamsungChromebook 2 11 Version-
   SamsungChromebook 2 11 Xe500c12 Version-
   SamsungChromebook 2 13 Version-
   SamsungChromebook 3 Version-
   SamsungChromebook Plus Version-
   SamsungChromebook Pro Version-
   Sector-fiveE1 Rugged Chromebook Version-
   SenkatelC1101 Chromebook Version-
   ToshibaChromebook Version-
   ToshibaChromebook 2 Version-
   ToshibaChromebook 2 Version- Edition2015
   TrueIdc Chromebook Version-
   TrueIdc Chromebook 11 Version-
   VideonetChromebook Version-
   VideonetChromebook Bl10 Version-
   ViglenChromebook 11 Version-
   ViglenChromebook 360 Version-
   XoloChromebook Version-
InfineonTrusted Platform Firmware Version133.32
   AcerC720 Chromebook Version-
   AcerChromebase Version-
   AcerChromebase 24 Version-
   AcerChromebook 11 C730 Version-
   AcerChromebook 11 C730e Version-
   AcerChromebook 11 C735 Version-
   AcerChromebook 11 C740 Version-
   AcerChromebook 11 C771 Version-
   AcerChromebook 11 C771t Version-
   AcerChromebook 11 N7 C731 Version-
   AcerChromebook 13 Cb5-311 Version-
   AcerChromebook 14 Cb3-431 Version-
   AcerChromebook 14 For Work Cp5-471 Version-
   AcerChromebook 15 Cb3-531 Version-
   AcerChromebook 15 Cb3-532 Version-
   AcerChromebook 15 Cb5-571 Version-
   AcerChromebook R11 Version-
   AcerChromebook R13 Cb5-312t Version-
   AcerChromebox Version-
   AcerChromebox Cxi2 Version-
   AopenChromebase Version- Editioncommercial
   AopenChromebase Version- Editionmini
   AopenChromebox Version- Editioncommercial
   AopenChromeboxi Version- Editionmini
   AsiChromebook Version-
   AsusChromebit Cs10 Version-
   AsusChromebook C200 Version-
   AsusChromebook C201pa Version-
   AsusChromebook C202sa Version-
   AsusChromebook C300 Version-
   AsusChromebook C300sa Version-
   AsusChromebook C301sa Version-
   AsusChromebook Flip C100pa Version-
   AsusChromebook Flip C302 Version-
   AsusChromebox Cn60 Version-
   AsusChromebox Cn62 Version-
   BobicusChromebook 11
   CtlJ2 Chromebook Version- SwPlatformeducation
   CtlJ4 Chromebook Version- SwPlatformeducation
   CtlJ5 Chromebook Version-
   CtlN6 Chromebook Version- SwPlatformeducation
   CtlNl61 Chromebook Version-
   DellChromebook 11 Version-
   DellChromebook 11 3120 Version-
   DellChromebook 11 3189 Version-
   DellChromebook 11 Model 3180 Version-
   DellChromebook 13 3380 Version-
   DellChromebox Version-
   EdugearChromebook K Version-
   EdugearChromebook M Version-
   EdugearChromebook R Version-
   EdugearCmt Chromebook Version-
   EdxisChromebook Version-
   EdxisEducation Chromebook Version-
   EpikChromebook Elb1101 Version-
   GooglePixel Version-
   HaierChromebook 11 Version-
   HaierChromebook 11 C Version-
   HaierChromebook 11 G2 Version-
   HaierChromebook 11e Version-
   HexaChromebook Pi Version-
   HisenseChromebook 11 Version-
   HpChromebook Version- SwPlatformmeetings
   HpChromebook 11-vxxx Version-
   HpChromebook 11 1100-1199 Version-
   HpChromebook 11 2000-2099 Version-
   HpChromebook 11 2100-2199 Version-
   HpChromebook 11 2200-2299 Version-
   HpChromebook 11 G1 Version-
   HpChromebook 11 G2 Version-
   HpChromebook 11 G3 Version-
   HpChromebook 11 G5 Version-
   HpChromebook 11 G5 Ee Version-
   HpChromebook 13 G1 Version-
   HpChromebook 14 Version-
   HpChromebook 14 Ak000-099 Version-
   HpChromebook 14 G3 Version-
   HpChromebook 14 G4 Version-
   HpChromebook 14 X000-x999 Version-
   HpChromebox G1 Version-
   Lenovo100s Chromebook Version-
   LenovoN20 Chromebook Version-
   LenovoN21 Chromebook Version-
   LenovoN22 Chromebook Version-
   LenovoN23 Chromebook Version-
   LenovoN23 Flex 11 Chromebook Version-
   LenovoN23 Yoga 11 Chromebook Version-
   LenovoN42 Chromebook Version-
   LenovoThinkcentre Chromebox Version-
   LenovoThinkpad 11e Chromebook Version-
   LenovoThinkpad 13 Chromebook Version-
   LgChromebase 22cb25s Version-
   LgChromebase 22cv241 Version-
   MedionAkoya S2013 Version-
   MedionChromebook S2015 Version-
   MercerChromebook Version-
   MercerV2 Chromebook Version-
   NcomputingChromebook Cx100 Version-
   NexianChromebook Version-
   PcmergeChromebook Pcm-116t-432b Version-
   Poin2Chromebook 11 Version-
   Poin2Chromebook 14 Version-
   PositivoChromebook Ch1190 Version-
   ProwiseEntry Line Chromebook Version-
   ProwiseProline Chromebook Version-
   RgsEducation Chromebook Version-
   SamsungChromebook 2 11 Version-
   SamsungChromebook 2 11 Xe500c12 Version-
   SamsungChromebook 2 13 Version-
   SamsungChromebook 3 Version-
   SamsungChromebook Plus Version-
   SamsungChromebook Pro Version-
   Sector-fiveE1 Rugged Chromebook Version-
   SenkatelC1101 Chromebook Version-
   ToshibaChromebook Version-
   ToshibaChromebook 2 Version-
   ToshibaChromebook 2 Version- Edition2015
   TrueIdc Chromebook Version-
   TrueIdc Chromebook 11 Version-
   VideonetChromebook Version-
   VideonetChromebook Bl10 Version-
   ViglenChromebook 11 Version-
   ViglenChromebook 360 Version-
   XoloChromebook Version-
InfineonRsa Library Version <= 1.02.013
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 73.44% 0.988
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/101484
Third Party Advisory
VDB Entry
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
Third Party Advisory
Issue Tracking
Mitigation
https://github.com/crocs-muni/roca
Third Party Advisory
Mitigation
https://keychest.net/roca
Third Party Advisory
Issue Tracking
Mitigation
https://monitor.certipath.com/rsatest
Third Party Advisory
Mitigation
https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update
Patch
Third Party Advisory
Issue Tracking
Mitigation
https://www.kb.cert.org/vuls/id/307015
Third Party Advisory
US Government Resource
Issue Tracking
Mitigation