← Vulnerability feed

Vulnerability record · CVE-2018-6622 · published 17 August 2018

CVE-2018-6622: Trustedcomputinggroup trusted platform module vulnerability

Trustedcomputinggroup · Trusted Platform Module

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

7.1 CVSS 3.0 High EPSS 0.52% · top 57.9%
7.1CVSS 3.0 base score, v2 3.6
0.52%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/105203 Third Party AdvisoryVDB Entry
https://www.usenix.org/conference/usenixsecurity18/presentation/han Third Party Advisory
http://www.securityfocus.com/bid/105203 Third Party AdvisoryVDB Entry
https://www.usenix.org/conference/usenixsecurity18/presentation/han Third Party Advisory

Track CVE-2018-6622 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2023-1017Trustedcomputinggroup trusted platform module out-of-bounds write vulnerabilityAn out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptP…EPSS 1.3%6.0CVE-2020-26933Trustedcomputinggroup trusted platform module vulnerabilityTrusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Contr…EPSS 0.30%5.5CVE-2023-1018Trustedcomputinggroup trusted platform module out-of-bounds read vulnerabilityAn out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDe…EPSS 5.6%

Source: NIST National Vulnerability Database (record CVE-2018-6622), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.