Answer in brief
CVE-2025-2884 records a Unknown severity vulnerability in Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation. The current sources do not mark it as known exploited. The current feed maps Siemens/SIMATIC CN 4100 (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2025-2884 records a Unknown severity vulnerability in Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation. The current sources do not mark it as known exploited. The current feed maps Siemens/SIMATIC CN 4100 (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Siemens/SIMATIC CN 4100 (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Siemens/SIMATIC CN 4100generic | >=0 <* | * |
| Siemens/SIMATIC Field PG M5generic | >=0 <* | * |
| Siemens/SIMATIC Field PG M6generic | >=0 <V26.01.14 | V26.01.14 |
| Siemens/SIMATIC IPC227Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC277Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC427Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC477Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC477E PROgeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC627Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC647Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC677Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC847Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC BX-32Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC BX-39Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC BX-56Ageneric | >=0 <V32.01.09 | V32.01.09 |
| Siemens/SIMATIC IPC BX-59Ageneric | >=0 <V32.01.09 | V32.01.09 |
| Siemens/SIMATIC IPC MD-57Ageneric | >=0 <V30.01.10 | V30.01.10 |
| Siemens/SIMATIC IPC PX-32Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC PX-39Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC PX-39A PROgeneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC RW-528Ageneric | >=0 <V34.01.02 | V34.01.02 |
| Siemens/SIMATIC IPC RW-548Ageneric | >=0 <V34.01.02 | V34.01.02 |
| Siemens/SIMATIC ITP1000generic | >=0 <* | * |
| Siemens/SIPLUS IPC427Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Trusted Computing Group/TPM2.0generic | >=0 <1.83 | 1.83 |
Published upstream
Jun 10, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Siemens/SIMATIC CN 4100 (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Siemens/SIMATIC CN 4100generic | >=0 <* | * |
| Siemens/SIMATIC Field PG M5generic | >=0 <* | * |
| Siemens/SIMATIC Field PG M6generic | >=0 <V26.01.14 | V26.01.14 |
| Siemens/SIMATIC IPC227Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC277Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC427Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC477Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC477E PROgeneric | >=0 <V21.01.20 | V21.01.20 |
| Siemens/SIMATIC IPC627Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC647Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC677Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC847Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC BX-32Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC BX-39Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC BX-56Ageneric | >=0 <V32.01.09 | V32.01.09 |
| Siemens/SIMATIC IPC BX-59Ageneric | >=0 <V32.01.09 | V32.01.09 |
| Siemens/SIMATIC IPC MD-57Ageneric | >=0 <V30.01.10 | V30.01.10 |
| Siemens/SIMATIC IPC PX-32Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC PX-39Ageneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC PX-39A PROgeneric | >=0 <V29.01.09 | V29.01.09 |
| Siemens/SIMATIC IPC RW-528Ageneric | >=0 <V34.01.02 | V34.01.02 |
| Siemens/SIMATIC IPC RW-548Ageneric | >=0 <V34.01.02 | V34.01.02 |
| Siemens/SIMATIC ITP1000generic | >=0 <* | * |
| Siemens/SIPLUS IPC427Egeneric | >=0 <V21.01.20 | V21.01.20 |
| Trusted Computing Group/TPM2.0generic | >=0 <1.83 | 1.83 |
Published upstream
Jun 10, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0
Quoted source text, attributed separately from HOL analysis.