High severity7.2NVD Advisory· Published Nov 18, 2020· Updated Jun 17, 2026
CVE-2020-26933
CVE-2020-26933
Description
Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED. Improper initialization of this shut-down may result in susceptibility to a dictionary attack.
Affected products
5cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.38:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.38:*:*:*:*:*:*
- cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.40:*:*:*:*:*:*
- cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.59:*:*:*:*:*:*
- Trusted Computing Group (TCG)/Trusted Platform Module Library Family 2.0 Library Specificationdescription
- Range: 1.38 - 1.59
Patches
Vulnerability mechanics
References
2- trustedcomputinggroup.org/about/security/nvdVendor Advisory
- trustedcomputinggroup.org/wp-content/uploads/TCGVRT004-Advisory-FINAL.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.