CVE-2018-6622 - CVE House
Back to Database
Status published High CVE-2018-6622

An issue was discovered that affects all producers of BIOS...

Vulnerability Description

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6622

Credits & Attribution

No credits recorded in the NVD database.

References

More from trustedcomputinggroup

View All →
CVE-2020-26933
Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0...
High 7.2
CVE-2020-24332
An issue was discovered in TrouSerS through 0.3.14. If the...
Medium 5.5
CVE-2012-0698
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause...
Medium 5

Affected Vendor

trustedcomputinggroup

View all reports →

Affected Software

trusted platform module
Vulnerable Versions:
2.0

Timeline

Official Publish: August 17th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.