Skip to main content
Sign Out
Welcome to Dell
My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us
Your Dell.com Carts
Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles

Article Number: 000190343

DSA-2021-161: Dell PowerEdge Server Security Update for a Trusted Platform Module (TPM) 2.0 Firmware Vulnerability

Summary: Dell PowerEdge Server remediation is available for a vulnerability in the Nuvoton NPCT75x Trusted Platform Module (TPM) 2.0 firmware version 7.2.1.0 that may be exploited by malicious users to compromise the affected system. ...

Article Content

Impact

Medium

Details

Third-party Component CVE More information
Trusted Platform Module 2.0 (Firmware 7.2.1.0) CVE-2020-25082 https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/
Third-party Component CVE More information
Trusted Platform Module 2.0 (Firmware 7.2.1.0) CVE-2020-25082 https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions Updated Versions or later Link to Update
R6525 and R7525 7.2.1.0 7.2.2.0

https://www.dell.com/support/home/drivers/driversdetails?driverid=v187j

This will download a version of the BIOS that will update the TPM firmware
C6525 7.2.1.0 7.2.2.0 https://www.dell.com/support/home/drivers/driversdetails?driverid=k9y88

This will download a version of the BIOS that will update the TPM firmware
XE8545 7.2.1.0 7.2.2.0 Link will be updated once available.

This will download a version of the BIOS that will update the TPM firmware
T40 7.2.1.0 7.2.2.0 https://www.dell.com/support/home/en-us/product-support/product/poweredge-t40/drivers

To determine the TPM firmware version used on your system, see KB article 190411: Dell PowerEdge Server: How to Tell Which TPM Firmware is Being Used on 15G Server Products. 

Notes:
BIOS updates require a reboot for installation and a scheduling maintenance window is recommended to perform the BIOS update.

The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Product Affected Versions Updated Versions or later Link to Update
R6525 and R7525 7.2.1.0 7.2.2.0

https://www.dell.com/support/home/drivers/driversdetails?driverid=v187j

This will download a version of the BIOS that will update the TPM firmware
C6525 7.2.1.0 7.2.2.0 https://www.dell.com/support/home/drivers/driversdetails?driverid=k9y88

This will download a version of the BIOS that will update the TPM firmware
XE8545 7.2.1.0 7.2.2.0 Link will be updated once available.

This will download a version of the BIOS that will update the TPM firmware
T40 7.2.1.0 7.2.2.0 https://www.dell.com/support/home/en-us/product-support/product/poweredge-t40/drivers

To determine the TPM firmware version used on your system, see KB article 190411: Dell PowerEdge Server: How to Tell Which TPM Firmware is Being Used on 15G Server Products. 

Notes:
BIOS updates require a reboot for installation and a scheduling maintenance window is recommended to perform the BIOS update.

The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Revision History

RevisionDateDescription
1.02021-08-10Initial release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Information

Article Properties

Affected Product

PowerEdge C6525, PowerEdge R6525, PowerEdge R7525, PowerEdge T40, PowerEdge XE8545, Product Security Information

Last Published Date

01 Sep 2021

Version

2

Article Type

Dell Security Advisory

Back to Top