CVE-2017-7524: TPM2-Tools Project TPM2.0-Tools

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

Affected products

• TPM2-Tools Project TPM2.0-Tools: up to and including 1.1.0

Published 2017-06-27. Last modified 2026-06-17.