Lucene search

MitreCVELIST:CVE-2020-26933

HistoryNov 18, 2020 - 4:50 p.m.

CVE-2020-26933

2020-11-1816:50:32

mitre

www.cve.org

trusted computing group

tpm library

specification

access control

vulnerability

dictionary attack

shutdown

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED. Improper initialization of this shut-down may result in susceptibility to a dictionary attack.

References

trustedcomputinggroup.org/about/security/

trustedcomputinggroup.org/wp-content/uploads/TCGVRT004-Advisory-FINAL.pdf

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-26933