{"affected":[{"affectedData":[{"product":"TPM2.0","vendor":"Trusted Computing Group","versions":[{"lessThan":"1.83","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC CN 4100","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC Field PG M5","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC Field PG M6","vendor":"Siemens","versions":[{"lessThan":"V26.01.14","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC BX-32A","vendor":"Siemens","versions":[{"lessThan":"V29.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC BX-39A","vendor":"Siemens","versions":[{"lessThan":"V29.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC BX-56A","vendor":"Siemens","versions":[{"lessThan":"V32.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC BX-59A","vendor":"Siemens","versions":[{"lessThan":"V32.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC MD-57A","vendor":"Siemens","versions":[{"lessThan":"V30.01.10","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC PX-32A","vendor":"Siemens","versions":[{"lessThan":"V29.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC PX-39A","vendor":"Siemens","versions":[{"lessThan":"V29.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC PX-39A PRO","vendor":"Siemens","versions":[{"lessThan":"V29.01.09","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC RW-528A","vendor":"Siemens","versions":[{"lessThan":"V34.01.02","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC RW-548A","vendor":"Siemens","versions":[{"lessThan":"V34.01.02","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC227E","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC277E","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC427E","vendor":"Siemens","versions":[{"lessThan":"V21.01.20","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC477E","vendor":"Siemens","versions":[{"lessThan":"V21.01.20","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC477E PRO","vendor":"Siemens","versions":[{"lessThan":"V21.01.20","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC627E","vendor":"Siemens","versions":[{"lessThan":"V25.02.16","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC647E","vendor":"Siemens","versions":[{"lessThan":"V25.02.16","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC677E","vendor":"Siemens","versions":[{"lessThan":"V25.02.16","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC IPC847E","vendor":"Siemens","versions":[{"lessThan":"V25.02.16","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC ITP1000","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS IPC427E","vendor":"Siemens","versions":[{"lessThan":"V21.01.20","status":"affected","version":"0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0"},{"lang":"es","value":"La función auxiliar CryptHmacSign de la implementación de referencia TCG TPM2.0 es vulnerable a lecturas fuera de los límites debido a la falta de validación del esquema de firma con el algoritmo de la clave de firma. Consulte la errata 1.83 del estándar TCG TPM2.0."}],"id":"CVE-2025-2884","lastModified":"2026-10-15T02:17:47.670","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":1.3,"impactScore":5.2,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-2884","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-06-13T01:41:10.489446Z","version":"2.0.3"}}]},"published":"2025-06-10T18:15:30.617","references":[{"source":"cret@cert.org","url":"https://github.com/stefanberger/libtpms/commit/04b2d8e9afc0a9b6bffe562a23e58c0de11532d1"},{"source":"cret@cert.org","url":"https://trustedcomputinggroup.org/about/security/"},{"source":"cret@cert.org","url":"https://trustedcomputinggroup.org/wp-content/uploads/TPM2.0-Library-Spec-v1.83-Errata_v1_pub.pdf"},{"source":"cret@cert.org","url":"https://trustedcomputinggroup.org/wp-content/uploads/VRT0009-Advisory-FINAL.pdf"},{"source":"cret@cert.org","url":"https://www.cve.org/CVERecord?id=CVE-2025-49133"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01209.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kb.cert.org/vuls/id/282450"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-628843.html"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}