CVE-2020-26933

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during…

High · published November 18, 2020

CVSS v3.1
7.2
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED. Improper initialization of this shut-down may result in susceptibility to a dictionary attack.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Published
2020-11-18T16:50Z
EPSS history
Timeline
  • 18 NOV 16:50Z
    Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during…
    cvelistv5