Lucene search
+L

521 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/21 12:0 a.m.6 views

The vulnerability of the device driver for the trusted platform module (TPM) of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the device driver for the trusted platform module TPM of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.03009EPSS
Exploits0References3
OSV
OSV
added 2021/01/12 8:15 p.m.2 views

CVE-2021-1656

TPM Device Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.03009EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.7 views

Microsoft Windows TPM 设备驱动程序信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. The Microsoft Windows/Windows Server TPM device driver is vulnerable to...

5.5CVSS6.6AI score0.03009EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/01/12 12:0 a.m.6 views

PT-2021-1599 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the TPM device driver of the Windows operating system. This can allow an attacker to gain unauthorized access to protected...

5.5CVSS6.7AI score0.03009EPSS
Exploits0References11
OSV
OSV
added 2020/11/18 5:15 p.m.6 views

CVE-2020-26933

Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...

6CVSS5.8AI score0.00297EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/18 12:0 a.m.9 views

Trusted Computing Group Trusted Platform Module Security Vulnerability

Trusted Computing Group Trusted Platform Module TPM is a chip that is planted inside a computer to provide a trusted root for the computer, organized by the Trusted Computing Group. The chip was developed by the Trusted Computing Group TCG to effectively protect PCs from unauthorized access. A...

7.2CVSS6.3AI score0.00297EPSS
Exploits0References3
Microsoft Secure
Microsoft Secure
added 2020/11/17 2:0 p.m.42 views

Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs

The role of the Windows PC and trust in technology are more important than ever as our devices keep us connected and productive across work and life. Windows 10 is the most secure version of Windows ever, built with end-to-end security for protection from the edge to the cloud all the way down to...

0.6AI score
Exploits0
Fedora
Fedora
added 2020/10/06 3:2 p.m.26 views

[SECURITY] Fedora 32 Update: tpm2-tss-2.4.3-1.fc32

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

6.7CVSS3.5AI score0.00588EPSS
Exploits0
Fedora
Fedora
added 2020/09/27 12:19 a.m.13 views

[SECURITY] Fedora 33 Update: tpm2-tss-3.0.1-1.fc33

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

3.5AI score
Exploits0
OpenVAS
OpenVAS
added 2020/09/27 12:0 a.m.18 views

Fedora: Security Advisory for tpm2-tss (FEDORA-2020-1d3fcce2a3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.7CVSS6.6AI score0.00588EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.7 views

TPM 2.0 device can't be recognized in Windows Server 2012 R2

TPM 2.0 device can't be recognized in Windows Server 2012 R2 This article describes an issue that occurs on a Trusted Platform Module TPM 2.0 device in Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you install this update, check out the Prerequisites...

5.6AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.6 views

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors allows a hacker to restore the values of secret keys stored in the TPM (Trusted Platform Module).

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to retrieve the values of secret keys...

5.9CVSS6.6AI score0.03279EPSS
Exploits0References5Affected Software4
Prion
Prion
added 2020/01/14 4:15 p.m.20 views

Design/Logic Flaw

On impacted versions and platforms the Trusted Platform Module TPM system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or...

2.1CVSS4.9AI score0.00332EPSS
Exploits0References1Affected Software13
Cvelist
Cvelist
added 2020/01/14 3:3 p.m.36 views

CVE-2020-5851

On impacted versions and platforms the Trusted Platform Module TPM system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or...

4.8AI score0.00332EPSS
Exploits0References1
CNVD
CNVD
added 2019/12/17 12:0 a.m.21 views

STMicroelectronics ST33TPHF2ESPI TPM Encryption Issue Vulnerability

The STMicroelectronics ST33TPHF2ESPI TPM is a Trusted Computing Platform Module from STMicroelectronics, Switzerland. A cryptographic issue vulnerability exists in versions of the STMicroelectronics ST33TPHF2ESPI TPM prior to 2019-09-12. The vulnerability stems from a networked system or product...

5.9CVSS6.5AI score0.03279EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.10 views

The vulnerability of the Intel Platform Trust Technology (PTT) platform for storing account data and managing keys, along with the microsoftware Intel Trusted Execution Engine (TXE) and Intel Server Platform Services, arises from the lack of protection for operational data. This allows attackers to gain access to the cryptographic keys stored in the Trusted Platform Module (TPM).

The vulnerability of the Intel Platform Trust Technology-based data storage and key management platform, along with the Intel Trusted Execution Engine software and Intel Server Platform Services, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a...

6.8CVSS7.2AI score0.02342EPSS
Exploits0References2Affected Software2
The Hacker News
The Hacker News
added 2019/11/13 9:29 a.m.7 views

Researchers Discover TPM-Fail Vulnerabilities Affecting Billions of Devices

A team of cybersecurity researchers today disclosed details of two new potentially serious CPU vulnerabilities that could allow attackers to retrieve cryptographic keys protected inside TPM chips manufactured by STMicroelectronics or firmware-based Intel TPMs. Trusted Platform Module TPM is a...

5.9CVSS6.9AI score0.03279EPSS
Exploits0
HPE Security Bulletins
HPE Security Bulletins
added 2019/11/13 12:0 a.m.2 views

HPESBHF03972 rev.3 - HPE ProLiant, Synergy, Edgeline and Apollo Gen10 Server Platform using TPM, Remote Disclosure of Information

Potential Security Impact: Local: Disclosure of Information; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 660 Gen10 Compute Module - Prior to 73.20 HPE ProLiant XL230k Gen10 Server - Prior to 73.20 HPE ProLiant XL190r Gen10 Server -...

6.8CVSS6.5AI score0.03279EPSS
Exploits0
ThreatPost
ThreatPost
added 2019/11/12 9:35 p.m.94 views

Microsoft Patches RCE Bug Actively Under Attack

A critical bug in a Microsoft scripting engine, under active attack, has been patched as part of Microsoft’s Patch Tuesday security roundup. The vulnerability exists in Internet Explorer and allows an attacker to execute rogue code if a victim is coaxed into visiting a malicious web page, or, if...

7.6CVSS9.1AI score0.72626EPSS
Exploits3References14
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:0 a.m.123 views

Microsoft Guidance for Vulnerability in Trusted Platform Module (TPM)

Executive Summary This advisory addresses CVE-2019-16863. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key confidentiality protection for a specific algorithm ECDSA. It is important to note that this is a TPM firmware vulnerability, an...

5.9CVSS5.6AI score0.03279EPSS
Exploits0
Rows per page
Query Builder