Lucene search

[email protected]CVE-2017-15361

HistoryOct 16, 2017 - 5:29 p.m.

CVE-2017-15361

2017-10-1617:29:00

[email protected]

web.nvd.nist.gov

151

infineon

rsa

library

tpm

firmware

security vulnerability

roca

cryptographic protection

bitlocker

yubikey

pgp

chrome os

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.

Affected configurations

NVD

Node

infineontrusted_platform_firmwareMatch4.31

infineontrusted_platform_firmwareMatch4.32

infineontrusted_platform_firmwareMatch6.40

infineontrusted_platform_firmwareMatch133.32

AND

acerc720_chromebookMatch-

acerchromebaseMatch-

acerchromebase_24Match-

acerchromebook_11_c730Match-

acerchromebook_11_c730eMatch-

acerchromebook_11_c735Match-

acerchromebook_11_c740Match-

acerchromebook_11_c771Match-

acerchromebook_11_c771tMatch-

acerchromebook_11_n7_c731Match-

acerchromebook_13_cb5-311Match-

acerchromebook_14_cb3-431Match-

acerchromebook_14_for_work_cp5-471Match-

acerchromebook_15_cb3-531Match-

acerchromebook_15_cb3-532Match-

acerchromebook_15_cb5-571Match-

acerchromebook_r11Match-

acerchromebook_r13_cb5-312tMatch-

acerchromeboxMatch-

acerchromebox_cxi2Match-

aopenchromebaseMatch-commercial

aopenchromebaseMatch-mini

aopenchromeboxMatch-commercial

aopenchromeboxiMatch-mini

asichromebookMatch-

asuschromebit_cs10Match-

asuschromebook_c200Match-

asuschromebook_c201paMatch-

asuschromebook_c202saMatch-

asuschromebook_c300Match-

asuschromebook_c300saMatch-

asuschromebook_c301saMatch-

asuschromebook_flip_c100paMatch-

asuschromebook_flip_c302Match-

asuschromebox_cn60Match-

asuschromebox_cn62Match-

bobicuschromebook_11

ctlj2_chromebookMatch-education

ctlj4_chromebookMatch-education

ctlj5_chromebookMatch-

ctln6_chromebookMatch-education

ctlnl61_chromebookMatch-

dellchromebook_11Match-

dellchromebook_11_3120Match-

dellchromebook_11_3189Match-

dellchromebook_11_model_3180Match-

dellchromebook_13_3380Match-

dellchromeboxMatch-

edugearchromebook_kMatch-

edugearchromebook_mMatch-

edugearchromebook_rMatch-

edugearcmt_chromebookMatch-

edxischromebookMatch-

edxiseducation_chromebookMatch-

epikchromebook_elb1101Match-

googlepixelMatch-

haierchromebook_11Match-

haierchromebook_11_cMatch-

haierchromebook_11_g2Match-

haierchromebook_11eMatch-

hexachromebook_piMatch-

hisensechromebook_11Match-

hpchromebookMatch-meetings

hpchromebook_11-vxxxMatch-

hpchromebook_11_1100-1199Match-

hpchromebook_11_2000-2099Match-

hpchromebook_11_2100-2199Match-

hpchromebook_11_2200-2299Match-

hpchromebook_11_g1Match-

hpchromebook_11_g2Match-

hpchromebook_11_g3Match-

hpchromebook_11_g4\/g4_eeMatch-

hpchromebook_11_g5Match-

hpchromebook_11_g5_eeMatch-

hpchromebook_13_g1Match-

hpchromebook_14Match-

hpchromebook_14_ak000-099Match-

hpchromebook_14_g3Match-

hpchromebook_14_g4Match-

hpchromebook_14_x000-x999Match-

hpchromebox_cb1-\(000-099\)Match-

hpchromebox_g1Match-

lenovo100s_chromebookMatch-

lenovon20_chromebookMatch-

lenovon21_chromebookMatch-

lenovon22_chromebookMatch-

lenovon23_chromebookMatch-

lenovon23_flex_11_chromebookMatch-

lenovon23_yoga_11_chromebookMatch-

lenovon42_chromebookMatch-

lenovothinkcentre_chromeboxMatch-

lenovothinkpad_11e_chromebookMatch-

lenovothinkpad_13_chromebookMatch-

lgchromebase_22cb25sMatch-

lgchromebase_22cv241Match-

medionakoya_s2013Match-

medionchromebook_s2015Match-

mercerchromebookMatch-

mercerv2_chromebookMatch-

ncomputingchromebook_cx100Match-

nexianchromebookMatch-

pcmergechromebook_pcm-116t-432bMatch-

poin2chromebook_11Match-

poin2chromebook_14Match-

positivochromebook_ch1190Match-

prowiseentry_line_chromebookMatch-

prowiseproline_chromebookMatch-

rgseducation_chromebookMatch-

samsungchromebook_2_11Match-

samsungchromebook_2_11_xe500c12Match-

samsungchromebook_2_13Match-

samsungchromebook_3Match-

samsungchromebook_plusMatch-

samsungchromebook_proMatch-

sector-fivee1_rugged_chromebookMatch-

senkatelc1101_chromebookMatch-

toshibachromebookMatch-

toshibachromebook_2Match-

toshibachromebook_2Match-2015

trueidc_chromebookMatch-

trueidc_chromebook_11Match-

videonetchromebookMatch-

videonetchromebook_bl10Match-

viglenchromebook_11Match-

viglenchromebook_360Match-

xolochromebookMatch-

Node

infineonrsa_libraryRange≤1.02.013

CPENameOperatorVersion
infineon:trusted_platform_firmwareinfineon trusted platform firmwareeq4.31
infineon:trusted_platform_firmwareinfineon trusted platform firmwareeq4.32
infineon:trusted_platform_firmwareinfineon trusted platform firmwareeq6.40
infineon:trusted_platform_firmwareinfineon trusted platform firmwareeq133.32

CPE	Name	Operator	Version
infineon:trusted_platform_firmware	infineon trusted platform firmware	eq	4.31
infineon:trusted_platform_firmware	infineon trusted platform firmware	eq	4.32
infineon:trusted_platform_firmware	infineon trusted platform firmware	eq	6.40
infineon:trusted_platform_firmware	infineon trusted platform firmware	eq	133.32