Lucene search
+L

1342 matches found

NVD
NVD
•added 2021/06/08 5:15 p.m.•20 views

CVE-2021-32015

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

6CVSS0.00222EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/08 5:15 p.m.•21 views

Design/Logic Flaw

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

3.6CVSS5.9AI score0.00222EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/08 4:58 p.m.•26 views

CVE-2021-32015

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

6.1AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/08 4:58 p.m.•64 views

CVE-2021-32015

Summary: CVE-2021-32015 affects Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0. A locally authenticated, high-privilege attacker could gain unauthorized access to TPM non-volatile memory. Impact: local compromise of TPM NVRAM. Mitigation: update to firmware 7.4.0.1 (note: not TCG/CC certified). Vendors...

6CVSS5.8AI score0.00222EPSS
SaveExploits0References1Affected Software1
Lenovo
Lenovo
•added 2021/06/08 2:44 p.m.•41 views

Nuvoton TPM 1.2 Vulnerability - Lenovo Support US

No description provided...

6CVSS6AI score0.00222EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•6 views

PT-2021-19627

Name of the Vulnerable Software and Affected Versions: Nuvoton NPCT75x TPM 1.2 firmware version 7.4.0.0 Description: A local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. Recommendations: For Nuvoton NPCT75x TPM 1.2 firmwa...

6CVSS0.00222EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/08 12:00 a.m.•11 views

CVE-2021-32015: Missing Authorization

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

6CVSS5.8AI score0.00222EPSS
SaveExploits0References2
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•21 views

GSD-2021-1000174 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

7.1AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•18 views

GSD-2021-1000143 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

7.1AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•21 views

GSD-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

7.2AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/05/31 3:39 p.m.•18 views

UVI-2021-1000045 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

7.2AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/05/31 3:39 p.m.•16 views

UVI-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

7.2AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/05/31 3:39 p.m.•28 views

UVI-2021-1000066 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

7.1AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•21 views

GSD-2021-1000045 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•24 views

GSD-2021-1000105 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

7.1AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/05/31 3:39 p.m.•20 views

UVI-2021-1000143 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

7.1AI score
SaveExploits0
osv_uvi
osv_uvi
•added 2021/05/31 3:39 p.m.•24 views

UVI-2021-1000174 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

7.1AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2021/05/31 3:39 p.m.•16 views

GSD-2021-1000066 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-24539

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.12.3 Description: The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-28610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns the use of a local variable for calculating the final log size in the EFI TPM module. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder