Description
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 6 repositories
-
nsacyber/Detect-CVE-2017-15361-TPM ★ 63 · Oct 19, 2017
Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber
-
titanous/rocacheck ★ 16 · Oct 17, 2017
Go package that checks if RSA keys are vulnerable to ROCA / CVE-2017-15361
-
0xxon/zeek-plugin-roca ★ 3 · Oct 25, 2017
Bro plugin to check if certificates are affected by CVE-2017-15361
-
lva/Infineon-CVE-2017-15361 ★ 2 · Oct 17, 2017
Simple PowerShell script to check whether a computer is using an Infineon TPM chip that is vulnerable to CVE-2017-15361.
-
Elbarbons/ROCA-attack-on-vulnerability-CVE-2017-15361 ★ 0 · Nov 2, 2020
ROCA attack on vulnerability CVE-2017-15361
-
0xxon/roca ★ 0 · Oct 25, 2017
Reimplementation of CVE-2017-15361 checker in C
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- ICSA-18-058-01A Siemens SIMATIC Industrial PCs (Update A) CISA ICS & IT advisories · Feb 10, 2020
References
- https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160
- https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards/
- https://blog.cr.yp.to/20171105-infineon.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03801en_us
- https://monitor.certipath.com/rsatest
- https://ics-cert.us-cert.gov/advisories/ICSA-18-058-01
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012
- https://crocs.fi.muni.cz/public/papers/rsa_ccs17
- https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/
- http://support.lenovo.com/us/en/product_security/LEN-15552
- https://security.netapp.com/advisory/ntap-20171024-0001/
- https://github.com/iadgov/Detect-CVE-2017-15361-TPM
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00104.html
- VU#307015 third-party-advisory
- https://github.com/crocs-muni/roca
- https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update
- https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03789en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html
- https://www.yubico.com/support/security-advisories/ysa-2017-01/
- 101484 vdb-entry
- https://keychest.net/roca