CVE-2025-2884: TPM2.0 0 to before 1.83; +24 more affected products

Affected technology

TPM2.0 · 0 to before 1.83
Trusted Computing Group

SIMATIC CN 4100 · 0 to before *
Siemens

SIMATIC Field PG M5 · 0 to before *
Siemens

SIMATIC Field PG M6 · 0 to before V26.01.14
Siemens

SIMATIC IPC BX-32A · 0 to before V29.01.09
Siemens

SIMATIC IPC BX-39A · 0 to before V29.01.09
Siemens

SIMATIC IPC BX-56A · 0 to before V32.01.09
Siemens

SIMATIC IPC BX-59A · 0 to before V32.01.09
Siemens

SIMATIC IPC MD-57A · 0 to before V30.01.10
Siemens

SIMATIC IPC PX-32A · 0 to before V29.01.09
Siemens

SIMATIC IPC PX-39A · 0 to before V29.01.09
Siemens

SIMATIC IPC PX-39A PRO · 0 to before V29.01.09
Siemens

SIMATIC IPC RW-528A · 0 to before V34.01.02
Siemens

SIMATIC IPC RW-548A · 0 to before V34.01.02
Siemens

SIMATIC IPC227E · 0 to before *
Siemens

SIMATIC IPC277E · 0 to before *
Siemens

SIMATIC IPC427E · 0 to before V21.01.20
Siemens

SIMATIC IPC477E · 0 to before V21.01.20
Siemens

SIMATIC IPC477E PRO · 0 to before V21.01.20
Siemens

SIMATIC IPC627E · 0 to before V25.02.16
Siemens

SIMATIC IPC647E · 0 to before V25.02.16
Siemens

SIMATIC IPC677E · 0 to before V25.02.16
Siemens

SIMATIC IPC847E · 0 to before V25.02.16
Siemens

SIMATIC ITP1000 · 0 to before *
Siemens

SIPLUS IPC427E · 0 to before V21.01.20
Siemens

Component: Not specified by the source
Function: is

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 6.6/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.