Information Leakage in TCG TPM 2.0 Reference Code

Executive Summary

This vulnerability allows a local attacker with elevated privileges to steal a credential from a TPM-aware Certificate Authority (CA) for a fake TPM key. The attacker can then use this credential to create false attestations for other TPM 2.0 operations, such as Attestation Keys, DevID Keys, or TLS authentication keys.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could let attackers impersonate trusted TPM keys, leading to unauthorized access to systems or data. It may also enable false authentication, allowing attackers to bypass security controls or perform actions as a legitimate TPM device.

Useful 0 Not Useful 0

Mitigation Strategies

Apply patches or updates from the TCG TPM 2.0 reference code vendor if available. Monitor for suspicious TPM key usage or attestation requests. Review and restrict local elevated privileges that could exploit this issue.

Useful 0 Not Useful 0