Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-40327
HistoryJan 13, 2022 - 4:15 p.m.

Authorization

2022-01-1316:15:00
PRIOn knowledge base
www.prio-n.com
3

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.

CPENameOperatorVersion
trusted_firmware-meq1.4.0

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

Related for PRION:CVE-2021-40327