Lucene search

K
cvelistNvidiaCVELIST:CVE-2021-34399
HistoryNov 20, 2021 - 2:55 p.m.

CVE-2021-34399

2021-11-2014:55:25
nvidia
www.cve.org
4
nvidia
tegra
hardware vulnerability
information disclosure
elevated privileges
unscrubbed registers
microcontroller

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0

Percentile

12.6%

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which may lead to information disclosure.

CNA Affected

[
  {
    "product": "NVIDIA GPU and Tegra hardware",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "Turing, Volta, Pascal, Maxwell, Tegra X1, Tegra X1+, Tegra TX2, Xavier"
      }
    ]
  }
]

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2021-34399