vulnwire
7.1high

CVE-2018-6622

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of th…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 43%
Public exploits
0
none known

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

Exploit prediction (EPSS)

0.51% probability of exploitation in the next 30 days, higher than 43% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.1CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
NVD2.03.6AV:L/AC:L/Au:N/C:N/I:P/A:P

References

  • securityfocus.com /bid/105203 · vdb-entry, x_refsource_BID, x_transferred
  • usenix.org /conference/usenixsecurity18/presentation/han · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.