(CVE-2026-0714) TPM-sniffing LUKS Keys on an Embedded Device

Original text by Per Idenfeldt Okuyama & Sam Eizad

The article describes a vulnerability (CVE-2026-0714) affecting the Moxa UC-1222A Secure Edition embedded industrial computer, where the disk encryption key for a LUKS-encrypted storage volume can be extracted by passively sniffing the communication between the SoC and the discrete TPM 2.0 chip. The device stores the…

https://core-jmp.org/2026/03/cve-2026-0714-tpm-sniffing-luks-keys-on-an-embedded-device/