Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| https://github.com/stefanberger/libtpms | affected | < 04b2d8e9afc0a9b6bffe562a23e58c0de11532d1 | vendor fix → 04b2d8e9afc0a9b6bffe562a23e58c0de11532d1 | osv | |
| https://github.com/stefanberger/libtpms | fixed | 04b2d8e9afc0a9b6bffe562a23e58c0de11532d1 | vendor fix → 04b2d8e9afc0a9b6bffe562a23e58c0de11532d1 | osv | |
| Trusted Computing Group/TPM2.0 Trusted Computing Group · TPM2.0 | affected | < 1.83 | none available | cve_cna | |
| Siemens/SIMATIC CN 4100 Siemens · SIMATIC CN 4100 | affected | no version stated vendor label: all versions | none available | cve_adp | |
| Siemens/SIMATIC Field PG M5 Siemens · SIMATIC Field PG M5 | affected | no version stated vendor label: all versions | none available | cve_adp | |
| Siemens/SIMATIC Field PG M6 Siemens · SIMATIC Field PG M6 | affected | < V26.01.14 | none available | cve_adp | |
| Siemens/SIMATIC IPC BX-32A Siemens · SIMATIC IPC BX-32A | affected | < V29.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC BX-39A Siemens · SIMATIC IPC BX-39A | affected | < V29.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC BX-56A Siemens · SIMATIC IPC BX-56A | affected | < V32.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC BX-59A Siemens · SIMATIC IPC BX-59A | affected | < V32.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC MD-57A Siemens · SIMATIC IPC MD-57A | affected | < V30.01.10 | none available | cve_adp | |
| Siemens/SIMATIC IPC PX-32A Siemens · SIMATIC IPC PX-32A | affected | < V29.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC PX-39A Siemens · SIMATIC IPC PX-39A | affected | < V29.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC PX-39A PRO Siemens · SIMATIC IPC PX-39A PRO | affected | < V29.01.09 | none available | cve_adp | |
| Siemens/SIMATIC IPC RW-528A Siemens · SIMATIC IPC RW-528A | affected | < V34.01.02 | none available | cve_adp | |
| Siemens/SIMATIC IPC RW-548A Siemens · SIMATIC IPC RW-548A | affected | < V34.01.02 | none available | cve_adp | |
| Siemens/SIMATIC IPC227E Siemens · SIMATIC IPC227E | affected | no version stated vendor label: all versions | none available | cve_adp | |
| Siemens/SIMATIC IPC277E Siemens · SIMATIC IPC277E | affected | no version stated vendor label: all versions | none available | cve_adp | |
| Siemens/SIMATIC IPC427E Siemens · SIMATIC IPC427E | affected | < V21.01.20 | none available | cve_adp | |
| Siemens/SIMATIC IPC477E Siemens · SIMATIC IPC477E | affected | < V21.01.20 | none available | cve_adp | |
| Siemens/SIMATIC IPC477E PRO Siemens · SIMATIC IPC477E PRO | affected | < V21.01.20 | none available | cve_adp | |
| Siemens/SIMATIC IPC627E Siemens · SIMATIC IPC627E | affected | < V25.02.16 | none available | cve_adp | |
| Siemens/SIMATIC IPC647E Siemens · SIMATIC IPC647E | affected | < V25.02.16 | none available | cve_adp | |
| Siemens/SIMATIC IPC677E Siemens · SIMATIC IPC677E | affected | < V25.02.16 | none available | cve_adp | |
| Siemens/SIMATIC IPC847E Siemens · SIMATIC IPC847E | affected | < V25.02.16 | none available | cve_adp | |
| Siemens/SIMATIC ITP1000 Siemens · SIMATIC ITP1000 | affected | no version stated vendor label: all versions | none available | cve_adp | |
| Siemens/SIPLUS IPC427E Siemens · SIPLUS IPC427E | affected | < V21.01.20 | none available | cve_adp |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.