Home
LOW: 3.8 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NDefault status
unaffected
all versions below 7.2.4.0 (cpe)
affected
Description
A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.
Problem types
CWE-1300 Improper protection of physical side channels
Product status
all versions below 7.2.4.0 (cpe)
Credits
Robin Muller, Roman Korkikian - uSec
References
www.gov.il/...ynamiccollectors/cve_advisories_listing?skip=0