CVE-2021-1070

Severity Score

7.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano y Nano 2GB, versiones L4T anteriores a 32.5, contiene una vulnerabilidad en el script apply_binaries.sh usado para instalar componentes de NVIDIA en la imagen del sistema de archivos root, en la cual un control de acceso inapropiado es aplicado, lo que puede conllevar a que un usuario no privilegiado pueda ser capaz de modificar los archivos del árbol de dispositivos del sistema, conllevando a una denegación de servicio

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-11-12 CVE Reserved
2021-01-26 CVE Published
2023-03-08 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://nvidia.custhelp.com/app/answers/detail/a_id/5147	2021-02-04

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Agx Xavier Search vendor "Nvidia" for product "Jetson Agx Xavier"	-	-	Safe
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Nano Search vendor "Nvidia" for product "Jetson Nano"	-	-	Safe
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Nano 2gb Search vendor "Nvidia" for product "Jetson Nano 2gb"	-	-	Safe
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Tx1 Search vendor "Nvidia" for product "Jetson Tx1"	-	-	Safe
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Tx2 Search vendor "Nvidia" for product "Jetson Tx2"	-	-	Safe
Nvidia Search vendor "Nvidia"	Linux For Tegra Search vendor "Nvidia" for product "Linux For Tegra"	< r32.5 Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"	-	Affected	in	Nvidia Search vendor "Nvidia"	Jetson Xavier Nx Search vendor "Nvidia" for product "Jetson Xavier Nx"	-	-	Safe