What the vulnerability does

01Description

Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

Key dates

02Disclosure timeline

November 16, 2021 CVE published
September 17, 2024 Record updated