// For flags

CVE-2021-1071

 

Severity Score

5.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead to information disclosure.

El kernel de NVIDIA Tegra en Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano y Nano 2GB, todas las versiones L4T anteriores a r32.5, contiene una vulnerabilidad en el controlador INA3221 en la que un control de acceso inapropiado puede conllevar a usuarios no autorizados a conseguir acceso a los datos de uso de energía del sistema, lo que puede conllevar a una divulgación de información

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-11-12 CVE Reserved
  • 2021-01-26 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Agx Xavier
Search vendor "Nvidia" for product "Jetson Agx Xavier"
--
Safe
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Nano
Search vendor "Nvidia" for product "Jetson Nano"
--
Safe
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Nano 2gb
Search vendor "Nvidia" for product "Jetson Nano 2gb"
--
Safe
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Tx1
Search vendor "Nvidia" for product "Jetson Tx1"
--
Safe
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Tx2
Search vendor "Nvidia" for product "Jetson Tx2"
--
Safe
Nvidia
Search vendor "Nvidia"
Linux For Tegra
Search vendor "Nvidia" for product "Linux For Tegra"
< r32.5
Search vendor "Nvidia" for product "Linux For Tegra" and version " < r32.5"
-
Affected
in Nvidia
Search vendor "Nvidia"
Jetson Xavier Nx
Search vendor "Nvidia" for product "Jetson Xavier Nx"
--
Safe