High severity7.1NVD Advisory· Published Aug 17, 2018· Updated Jun 17, 2026
CVE-2018-6622
CVE-2018-6622
Description
An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/105203nvdThird Party AdvisoryVDB Entry
- www.usenix.org/conference/usenixsecurity18/presentation/hannvdThird Party Advisory
News mentions
0No linked articles in our index yet.