CVE-2018-6622

EPSS 0.22%
Veröffentlicht 17.08.2018 18:29:01
Zuletzt bearbeitet 21.11.2024 04:11:00
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trustedcomputinggroup ≫ Trusted Platform Module Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.418

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
nvd@nist.gov	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:N/I:P/A:P

https://www.usenix.org/conference/usenixsecurity18/presentation/han

Third Party Advisory

http://www.securityfocus.com/bid/105203

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-6622

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-6622

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-6622

EUVD