SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-2884US | — | — | ||
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (24)
- Kein Fix geplantSIMATIC CN 4100
Currently no fix is planned
- Kein Fix geplantSIMATIC Field PG M5
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC227E
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC277E
Currently no fix is planned
- Kein Fix geplantSIMATIC ITP1000
Currently no fix is planned
- BehobenSIMATIC Field PG M6
Update to V26.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC BX-32A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC BX-39A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC BX-56A
Update to V32.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC BX-59A
Update to V32.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC MD-57A
Update to V30.01.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC PX-32A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC PX-39A
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC PX-39A PRO
Update to V29.01.09 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC RW-528A
Update to V34.01.02 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC RW-548A
Update to V34.01.02 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC427E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC477E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC477E Pro
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC627E
Update to V25.02.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC647E
Update to V25.02.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC677E
Update to V25.02.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIMATIC IPC847E
Update to V25.02.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - BehobenSIPLUS IPC427E
Update to V21.01.20 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan