Exploit for rocacheck

kitploit · 2026-08-26

Description

Go tool checking RSA keys for ROCA vulnerability (CVE-2017-15361) from broken Infineon code.

Affected Infineon Trusted Platform Firmware versions

Infineon Trusted Platform Firmware= 4.31, 4.32, 6.40, 133.32

All known vulnerabilities by product

Bitlocker Chrome Os Infineon Trusted Platform Module Yubikey 4

CVSS 5.9 for CVE-2017-15361

5.9

MEDIUM SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

References

https://github.com/crocs-muni/roca

https://godoc.org/github.com/titanous/rocacheck

Exploit Details

Modified:2026-08-26 00:51

Last Seen:2026-08-26 06:54

Reporter:KitPloit

Tags

rocacheckROCARSA keyInfineonCVE-2017-15361Go implementationkey fingerprint

Other exploits for CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361

2026-08-28 KitPloitKITPLOIT

Detect-CVE-2017-15361-TPM

2026-08-27 KitPloitKITPLOIT

Infineon-CVE-2017-15361

2026-08-25 KitPloitKITPLOIT

zeek-plugin-roca

2026-08-24 KitPloitKITPLOIT

Nmap 7.70 - Free Security Scanner: Better service and OS detection, 9 new NSE scripts, new Npcap, and much more

2018-03-21 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TITANOUS-ROCACHECK
# rocacheck ![GoDoc](https://godoc.org/github.com/titanous/rocacheck?status.svg)

पैकेज rocacheck कुंजी फिंगरप्रिंट एल्गोरिथम का एक Go कार्यान्वयन है जो जाँचता है कि क्या कोई RSA कुंजी दोषपूर्ण Infineon कोड द्वारा उत्पन्न हुई थी और कॉपरस्मिथ के हमले की वापसी (ROCA) / CVE-2017-15361 के माध्यम से गुणनखंडन के लिए संवेदनशील है।