Physical-access attacks expose weaknesses in TPM-only BitLocker protection

Researchers detailed multiple attack paths that can defeat or weaken Microsoft BitLocker on systems using TPM-only unlock, showing that physical access remains enough to recover disk encryption keys or bypass pre-boot protections in common configurations. Neodyme revisited the Bitpixie technique tied to CVE-2023-21563, describing how attackers can downgrade the Windows Boot Manager, abuse a PXE soft-reboot path, and recover the Volume Master Key from memory without the user’s password. A follow-up analysis said Microsoft has struggled to fully close downgrade paths because Secure Boot revocation capacity is limited, older Microsoft-signed bootloaders remain broadly trusted, and stricter PCR bindings have caused recovery and compatibility problems in the field.

Separate research from MDSec showed that Dell UEFI firmware can be modified offline at the SPI flash level to disable pre-boot DMA protections while leaving BIOS settings appearing unchanged, enabling follow-on DMA attacks against Windows 11 devices protected by TPM-only BitLocker and, in some cases, privilege escalation even on TPM+PIN systems when the PIN is known. A public GitHub project compiling BitLocker attack techniques further underscored the breadth of the issue, cataloging hardware and software methods ranging from TPM bus sniffing and fTPM glitching to bootloader, WinRE, and recovery-environment flaws across numerous CVEs. Across the disclosures, the consistent mitigation theme was to avoid relying on TPM-only unlock where possible, apply Microsoft’s Secure Boot certificate updates such as KB5025885, and require a pre-boot PIN to materially raise the bar for physical attackers.