Lucene search

[email protected]CVE-2021-23201

HistoryNov 20, 2021 - 3:15 p.m.

CVE-2021-23201

2021-11-2015:15:07

[email protected]

web.nvd.nist.gov

nvidia

gpu

tegra

vulnerability

privilege escalation

microcontroller

exploit

information disclosure

data corruption

denial of service

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.

Affected configurations

NVD

Node

nvidiageforce_gtx_950Match-

nvidiageforce_gtx_960Match-

nvidiageforce_gtx_970Match-

nvidiageforce_gtx_980Match-

nvidiageforce_gtx_titan_xMatch-

nvidiajetson_nanoMatch-

nvidiajetson_nanoMatch--

nvidiajetson_nanoMatch-developer_kit

nvidiajetson_tx1Match-

nvidiaquadro_m1000mMatch-

nvidiaquadro_m1200Match-

nvidiaquadro_m2000Match-

nvidiaquadro_m2000mMatch-

nvidiaquadro_m2200Match-

nvidiaquadro_m3000mMatch-

nvidiaquadro_m4000Match-

nvidiaquadro_m4000mMatch-

nvidiaquadro_m5000Match-

nvidiaquadro_m5000mMatch-

nvidiaquadro_m500mMatch-

nvidiaquadro_m520Match-

nvidiaquadro_m5500Match-

nvidiaquadro_m6000Match-

nvidiaquadro_m600mMatch-

nvidiaquadro_m620Match-

nvidiashield_tvMatch-

nvidiashield_tv_proMatch-

nvidiatesla_m10Match-

nvidiatesla_m2050Match-

nvidiatesla_m2070Match-

nvidiatesla_m2070qMatch-

nvidiatesla_m2090Match-

nvidiatesla_m4Match-

nvidiatesla_m40Match-

nvidiatesla_m6Match-

nvidiatesla_m60Match-

nvidiatesla_p100Match-

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
nvidia:geforce_gtx_950nvidia geforce gtx 950eq-
nvidia:geforce_gtx_960nvidia geforce gtx 960eq-
nvidia:geforce_gtx_970nvidia geforce gtx 970eq-
nvidia:geforce_gtx_980nvidia geforce gtx 980eq-
nvidia:geforce_gtx_titan_xnvidia geforce gtx titan xeq-
nvidia:jetson_nanonvidia jetson nanoeq-
nvidia:jetson_tx1nvidia jetson tx1eq-
nvidia:quadro_m1000mnvidia quadro m1000meq-
nvidia:quadro_m1200nvidia quadro m1200eq-
nvidia:quadro_m2000nvidia quadro m2000eq-

CPE	Name	Operator	Version
nvidia:geforce_gtx_950	nvidia geforce gtx 950	eq	-
nvidia:geforce_gtx_960	nvidia geforce gtx 960	eq	-
nvidia:geforce_gtx_970	nvidia geforce gtx 970	eq	-
nvidia:geforce_gtx_980	nvidia geforce gtx 980	eq	-
nvidia:geforce_gtx_titan_x	nvidia geforce gtx titan x	eq	-
nvidia:jetson_nano	nvidia jetson nano	eq	-
nvidia:jetson_tx1	nvidia jetson tx1	eq	-
nvidia:quadro_m1000m	nvidia quadro m1000m	eq	-
nvidia:quadro_m1200	nvidia quadro m1200	eq	-
nvidia:quadro_m2000	nvidia quadro m2000	eq	-

Rows per page:

1-10 of 351

CNA Affected

[
  {
    "product": "NVIDIA GPU and Tegra hardware",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "Turing, Volta, Pascal, Maxwell, Tegra X1, Tegra X1+, Tegra TX2, Xavier"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5263

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-23201

cvelist1 nvd1 prion1 nvidia1