Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-34393

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

Published

2021-06-22T22:15:09.210

Last Modified

2024-11-21T06:10:18.307

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.2 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-502
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia jetson_linux < 32.5.1 Yes
Hardware nvidia jetson_agx_xavier_16gb - No
Hardware nvidia jetson_agx_xavier_32gb - No
Hardware nvidia jetson_agx_xavier_8gb - No
Hardware nvidia jetson_tx1 - No
Hardware nvidia jetson_tx2 - No
Hardware nvidia jetson_tx2_4gb - No
Hardware nvidia jetson_tx2_nx - No
Hardware nvidia jetson_tx2i - No
Hardware nvidia jetson_xavier_nx - No
Hardware nvidia jetson_xavier_nx - No
References