K32412503: Trusted Platform Module vulnerabilities CVE-2019-11090 and CVE-2019-16863

🗓️ 21 Feb 2023 19:57:36Reported by f5Type

f5🔗 my.f5.com👁 53 Views

Trusted Platform Module vulnerabilities CVE-2019-11090 and CVE-2019-16863. Cryptographic timing conditions in Intel(R) PTT, TXE and SPS may allow unauthenticated users to enable information disclosure. ST33TPHF2ESPI TPM devices mishandle ECDSA scalar multiplication

Reporter	Title	Published	Views	Family All 31
BDU FSTEC	The vulnerability of the Intel Platform Trust Technology (PTT) platform for storing account data and managing keys, along with the microsoftware Intel Trusted Execution Engine (TXE) and Intel Server Platform Services, arises from the lack of protection for operational data. This allows attackers to gain access to the cryptographic keys stored in the Trusted Platform Module (TPM).	13 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors allows a hacker to restore the values of secret keys stored in the TPM (Trusted Platform Module).	4 Mar 202000:00	–	bdu_fstec
Circl	CVE-2019-11090	13 Nov 201916:55	–	circl
Circl	CVE-2019-16863	13 Nov 201916:55	–	circl
CNVD	Competitive conditions issue vulnerability for multiple Intel products	5 Dec 201900:00	–	cnvd
CNVD	STMicroelectronics ST33TPHF2ESPI TPM Encryption Issue Vulnerability	17 Dec 201900:00	–	cnvd
CVE	CVE-2019-11090	18 Dec 201921:08	–	cve
CVE	CVE-2019-16863	14 Nov 201902:07	–	cve
Cvelist	CVE-2019-11090	18 Dec 201921:08	–	cvelist
Cvelist	CVE-2019-16863	14 Nov 201902:07	–	cvelist