CVE-2018-6622

EPSS 0.22%
Published 17.08.2018 18:29:01
Last modified 21.11.2024 04:11:00
Source cve@mitre.org
Teams watchlist Login
Open Login

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Trustedcomputinggroup ≫ Trusted Platform Module Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.22%	0.418

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
nvd@nist.gov	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:N/I:P/A:P

https://www.usenix.org/conference/usenixsecurity18/presentation/han

Third Party Advisory

http://www.securityfocus.com/bid/105203

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-6622

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-6622

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-6622

EUVD