CVE-2020-26933 - CVE House
Back to Database
Status published High CVE-2020-26933

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0...

Vulnerability Description

Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED. Improper initialization of this shut-down may result in susceptibility to a dictionary attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26933

Credits & Attribution

No credits recorded in the NVD database.

References

More from trustedcomputinggroup

View All →
CVE-2020-24332
An issue was discovered in TrouSerS through 0.3.14. If the...
Medium 5.5
CVE-2018-6622
An issue was discovered that affects all producers of BIOS...
High 7.1
CVE-2012-0698
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause...
Medium 5

Affected Vendor

trustedcomputinggroup

View all reports →

Affected Software

trusted platform module
Vulnerable Versions:
2.0

Timeline

Official Publish: November 18th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:H/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.