vulnerability
ROCA: Vulnerable RSA generation from Infineon TPM (CVE-2017-15361)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | 2017-10-16 | 2017-11-02 | 2017-12-01 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
2017-10-16
Added
2017-11-02
Modified
2017-12-01
Description
The Infineon RSA library version 1.02.013 does not properly generate RSA key pairs. As a result, the keyspace required for a brute force search is lessened such that it is feasible to factorize keys under at least 2048 bits and obtain the RSA private key. The attacker needs only access to the victim's RSA public key generated by this library in order to calculate the private key.
This is also known as Return of Coppersmith's Attack (ROCA)
Solution
infineon-tpm-cve-2017-15361
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.