Exploitation Summary
EIP tracks 6 public exploits for CVE-2017-15361. PoCs published by nsacyber, titanous, 0xxon.
AI-analyzed exploit summary This repository contains detection scripts for CVE-2017-15361, a vulnerability in Infineon TPM firmware affecting RSA key generation. It includes scripts for Linux and Windows to check if a system's TPM is vulnerable.
Description
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.
Exploits (6)
This repository contains detection scripts for CVE-2017-15361, a vulnerability in Infineon TPM firmware affecting RSA key generation. It includes scripts for Linux and Windows to check if a system's TPM is vulnerable.
This repository provides a Go implementation of the ROCA vulnerability detection algorithm (CVE-2017-15361) to check if an RSA key was generated by flawed Infineon code. It includes a library and test cases for validating weak and strong keys.
This repository contains a Zeek plugin for detecting CVE-2017-15361 (ROCA vulnerability) in public keys. It implements the detection algorithm and provides BIFs to check certificates and moduli for vulnerability.
This PowerShell script checks if a system's Infineon TPM firmware is vulnerable to CVE-2017-15361 by comparing firmware versions against known affected ranges. It does not exploit the vulnerability but serves as a detection tool.
This repository contains a proof-of-concept implementation of the ROCA attack (CVE-2017-15361), which exploits a vulnerability in RSA key generation to factorize weak RSA moduli. The code includes key generation, fingerprinting, and attack modules to demonstrate the vulnerability.
This code is a scanner for detecting RSA keys vulnerable to the ROCA vulnerability (CVE-2017-15361). It checks if a given modulus is vulnerable by testing specific mathematical properties.
References (22)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N