Nxp Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined18

Produkt

NXP MCUXpresso SDK3
NXP Kinetis KV1x2
NXP Kinetis KV3x2
NXP Kinetis K8x2
NXP i.MX 502

Przeciwdziałanie

Official Fix5
Temporary Fix0
Workaround0
Unavailable0
Not Defined13

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Wektor dostępu

Not Defined0
Physical7
Local3
Adjacent5
Network3

Uwierzytelnianie

Not Defined0
High0
Low10
None8

Interakcja z użytkownikiem

Not Defined0
Required0
None18

C3BM Index

CVSSv3 Base

≤10
≤21
≤31
≤40
≤52
≤66
≤74
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤21
≤31
≤40
≤52
≤66
≤74
≤84
≤90
≤100

VulDB

≤10
≤21
≤32
≤41
≤53
≤67
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤63
≤73
≤83
≤91
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤73
≤82
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k7
<2k6
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k16
<2k1
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (58): A7x (1), KW41Z (1), Kinetis K8x (2), Kinetis K82 (1), Kinetis KV1x (2), Kinetis KV3x (2), LPC55S1x (1), LPC55S2x (1), LPC55S6x (1), LPC55S6x (1), LPC55S66JBD64 (1), LPC55S66JBD100 (1), LPC55S66JEV98 (1), LPC55S69 (1), LPC55S69JBD64 (1), LPC55S69JBD100 (1), LPC55S69JEV98 (1), LPC551x (1), LPC552x (1), MCUXpresso SDK (3), MIFARE Ultralight (1), MQX (1), NTAG Card (1), P5x (1), SDK (1), SmartMX (1), Vybrid VF3xx (1), Vybrid VF5xx (2), Vybrid VF6xx (2), i.MX 6 (1), i.MX 6Dual (2), i.MX 6DualLite (2), i.MX 6DualPlus (2), i.MX 6Quad (2), i.MX 6QuadPlus (2), i.MX 6Solo (2), i.MX 6SoloLite (2), i.MX 6SoloX (2), i.MX 6ULL (2), i.MX 6UltraLite (2), i.MX 7 (1), i.MX 7Dual Vybrid VF3xx (1), i.MX 7Solo (1), i.MX 8M (1), i.MX 8M Mini (1), i.MX8M Mini (1), i.MX 8M Nano (1), i.MX 8M Plus (1), i.MX8M Quad (1), i.MX8M Vybrid (1), i.MX 28 (1), i.MX 50 (2), i.MX 53 (2), i.MX RT 101x (1), i.MX RT102x (1), i.MX RT500 (1), i.MX RT600 (1), i.MX RT1050 (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-10-177.37.2NXP i.MX 8M/i.MX 8M Nano/i.MX 8M Mini/i.MX 8M Plus Flattened Image Tree Format memory corruptionNieznanyNot DefinedOfficial Fix0.000430.00CVE-2023-39902
2022-11-194.14.1NXP i.MX RT 101x SDP Mode information disclosureNieznanyNot DefinedNot Defined0.000590.02CVE-2022-45163
2022-05-047.37.1NXP MCUXpresso SDK SDK_Malloc memory corruptionNieznanyNot DefinedOfficial Fix0.002130.00CVE-2021-27421
2022-05-047.37.2NXP MQX _partition memory corruptionNieznanyNot DefinedNot Defined0.002630.00CVE-2021-22680
2022-03-245.55.5NXP LPC55S69JEV98 SB2 Update Parser memory corruptionNieznanyNot DefinedNot Defined0.001100.00CVE-2022-22819
2021-12-015.65.6NXP Kinetis K82 GET Status-Other Request memory corruptionNieznanyNot DefinedNot Defined0.000440.00CVE-2021-44479
2021-12-015.65.6NXP LPC55S69 GET Descriptor Configuration Request memory corruptionNieznanyNot DefinedOfficial Fix0.000440.02CVE-2021-40154
2021-10-266.66.5NXP MCUXpresso SDK USB_HostParseDeviceConfigurationDescriptor memory corruptionNieznanyNot DefinedOfficial Fix0.000480.00CVE-2021-38260
2021-10-266.66.5NXP MCUXpresso SDK USB_HostProcessCallback memory corruptionNieznanyNot DefinedOfficial Fix0.000480.00CVE-2021-38258
2021-06-062.92.9NXP MIFARE Ultralight/NTAG Card privilege escalationNieznanyNot DefinedNot Defined0.001230.00CVE-2021-33881

8 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!