Infineon Trusted Platform Module (TPM) Vulnerability (CVE-2017-15361) : Impact Status on Dell Products

Dell is aware of a vulnerability identified in the RSA key generation method used by Infineon Trusted Platform Modules (TPMs) tracked through CVE-2017-15361. Dell has completed investigation on this issue and found only a small list of products affected. These products are listed below with recommended remediation steps. Please refer to the Patch Guidance section for details on patches published by Operating System vendors.

Patch Guidance:

• Infineon: https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160
• Microsoft Windows: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012
• Google Chrome: https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update

References:

• Tools provided by Centre for Research on Cryptography and Security: https://crocs.fi.muni.cz/public/papers/rsa_ccs17#detection_tools_mitigation_and_workarounds
• Article by Centre for Research on Cryptography and Security: https://crocs.fi.muni.cz/public/papers/rsa_ccs17
• CERT/CC Vulnerability Note VU#307015: https://www.kb.cert.org/vuls/id/307015

For status of RSA products, browse to: https://community.rsa.com/docs/DOC-84619

Dell Products Affected: