Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-32015

Опубликовано: 08 июн. 2021
Источник: nvd
CVSS3: 6
CVSS2: 3.6
EPSS Низкий

Описание

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Common Criteria (CC) certified. Nuvoton recommends that users apply the NPCT75x TPM 1.2 firmware update.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:nuvoton:npct75x_firmware:7.4.0.0:*:*:*:*:*:*:*
cpe:2.3:h:nuvoton:npct75x:1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00045
Низкий

6 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-862

Связанные уязвимости

github
больше 3 лет назад

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Common Criteria (CC) certified. Nuvoton recommends that users apply the NPCT75x TPM 1.2 firmware update.

EPSS

Процентиль: 14%
0.00045
Низкий

6 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-862