Code injection

2023-04-1812:15:00

PRIOn knowledge base

www.prio-n.com

code injection

openrisc mor1kx

eear vulnerability

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The write logic of Exception Effective Address Register (EEAR) is not implemented correctly. User programs from authorized privilege levels will be unable to write to EEAR.

CPENameOperatorVersion
mor1kx_firmwarelt5.1

CPE	Name	Operator	Version
	mor1kx_firmware	lt	5.1

References

github.com/openrisc/mor1kx/issues/141

seth.engr.tamu.edu/software-releases/thehuzz/