VDB
SSA-628843
SSA-628843
PUBLISHED
CVSS 6.599999904632568 MEDIUM
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC IPC RW-548A < V34.01.02 | |
| Siemens | SIPLUS IPC427E < V21.01.20 | |
| Siemens | SIMATIC IPC PX-39A PRO | |
| Siemens | SIMATIC Field PG M5 | |
| Siemens | SIMATIC IPC PX-39A < V29.01.09 | |
| Siemens | SIMATIC IPC BX-39A | |
| Siemens | SIMATIC IPC BX-32A < V29.01.09 | |
| Siemens | SIMATIC IPC277E | |
| Siemens | SIMATIC CN 4100 | |
| Siemens | SIMATIC IPC BX-32A | |
| Siemens | SIMATIC IPC MD-57A | |
| Siemens | SIMATIC IPC MD-57A < V30.01.10 | |
| Siemens | SIMATIC IPC847E | |
| Siemens | SIPLUS IPC427E | |
| Siemens | SIMATIC IPC477E PRO < V21.01.20 | |
| Siemens | SIMATIC IPC BX-39A < V29.01.09 | |
| Siemens | SIMATIC IPC677E | |
| Siemens | SIMATIC IPC RW-528A | |
| Siemens | SIMATIC IPC477E | |
| Siemens | SIMATIC IPC427E < V21.01.20 |
…and 20 more
Timeline
- Apr 14, 2026 CVE Published
- Aug 11, 2026 CVE Updated