APEX Cloud Platform For Microsoft Azure: 15G and 16G PowerEdge TPM 2.0 firmware for CVE-2025-2884

The consequence of a successful exploit is denial of service of the TPM. Dell Technologies recommends that customers review their security posture, including restriction of accounts with administrative privileges from sending commands to the TPM. Customers should consider this review as part of their decision-making process when determining whether to apply the patch. Customers should consider 2 additional factors prior to installing the patch. First, the TPM's security policy does not permit installation of a lower version of the firmware once the TPM's firmware is upgraded. Second, this firmware version does not have FIPS 140-3 certification. If you upgrade a system to it, you may lose that system's FIPS status. This updated firmware listed below is certified to TCG and Common Criteria standards. It is in the queue for FIPS 140-3.

PowerEdge Dell Security Advisory: DSA-2025-232

Reach out to Dell Technical Support or your Authorized Service Representative for more information.