PT-2020-13324 · Unknown · Trusted Platform Modules (Tpm) Reference
Published
2020-11-12
·
Updated
2020-11-30
·
CVE-2020-12926
CVSS v2.0
4.4
Medium
| Vector | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Trusted Platform Modules (TPM) reference software (affected versions not specified)
Description
The issue is related to the Trusted Platform Modules (TPM) reference software, which may not properly track the number of times a failed shutdown happens, potentially leaving the TPM in a state where confidential key material may be compromised. The attack is believed to require physical access to the device, as it involves repeatedly turning the power on and off. This could be used to change confidential information, alter executables signed by key material in the TPM, or create a denial of service of the device.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Trusted Platform Modules (Tpm) Reference