Siemens TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-2884US | — | — | ||
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's… | ||||
references
External citations — patches, advisories, analysis.
- SSA-628843: Out of Bound Read Vulnerability in TPM 2.0 - CSAF Versionself
- SSA-628843: Out of Bound Read Vulnerability in TPM 2.0 - HTML Versionself
- ICS Advisory ICSA-26-111-01 JSONself
- ICS Advisory ICSA-26-111-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- No fix plannedSIMATIC CN 4100
Currently no fix is planned
- No fix plannedSIMATIC IPC227E
Currently no fix is planned
- No fix plannedSIMATIC IPC277E
Currently no fix is planned
- No fix availableSIMATIC Field PG M5
Currently no fix is available
- No fix availableSIMATIC Field PG M6
Currently no fix is available
- No fix availableSIMATIC IPC627E
Currently no fix is available
- No fix availableSIMATIC IPC647E
Currently no fix is available
- No fix availableSIMATIC IPC677E
Currently no fix is available
- No fix availableSIMATIC IPC847E
Currently no fix is available
- No fix availableSIMATIC ITP1000
Currently no fix is available
- FixedSIMATIC IPC BX-32A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-39A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-56A
Update to V32.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-59A
Update to V32.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC MD-57A
Update to V30.01.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-32A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A PRO
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-528A
Update to V34.01.02 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-548A
Update to V34.01.02 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC427E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E Pro
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIPLUS IPC427E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan