Intel® Server Board TPM Advisory

Summary:

A potential security vulnerability in Intel® Server Boards may allow information disclosure. Intel is releasing Intel® Server Board firmware updates to mitigate this potential vulnerability.

Vulnerability Details

CVEID:** CVE-2017-15361**

Description: Information disclosure in Infineon TPM in Intel® S2600 Server Boards may allow an unauthenticated user to potentially disclose information using crypto analysis via local access.

CVSS Base Score: 5.9 Medium

CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

Intel® Server Board S2600WT (Grantley)

Intel® Server Board S2600TP (Grantley)

Intel® Server Board S2600BP (Purley)

Recommendations:

Intel recommends that users update to the latest firmware versions (see provided list below).

Intel® Server Board S2600WT:

<https://downloadcenter.intel.com/download/28002/Intel-Server-Board-S2600WT-BIOS-and-Firmware-Update-for-EFI?product=43716&gt;

Intel® Server Board S2600TP:

<https://downloadcenter.intel.com/download/28005/Intel-Server-Board-S2600TP-Family-Firmware-Update-Package-for-EFI?product=43716&gt;

Intel® Server Board S2600BP:

<https://downloadcenter.intel.com/download/28007/Intel-Server-Board-S2600BP-Family-BIOS-and-Firmware-Update-Package-for-UEFI-?product=93091&gt;

Acknowledgements:

This issue was found internally by Intel.