NVIDIA Jetson TX1 vulnerabilities

11 CVEs affecting NVIDIA Jetson TX1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34400, published 2021-11-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3639, published 2018-05-22. Medium severity, CVSS 5.5. EPSS: 60.6% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of…
CVE-2017-1000251, published 2017-09-12. High severity, CVSS 8.0. EPSS: 16.2% chance of exploitation in the next 30 days. The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing…
CVE-2019-5672, published 2019-04-11. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are…
CVE-2021-23217, published 2021-11-20. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time…
CVE-2021-23201, published 2021-11-20. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and…
CVE-2021-34400, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may…
CVE-2021-34399, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which…
CVE-2021-1105, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to…
CVE-2021-1088, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control,…
CVE-2021-23219, published 2021-11-20. Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and…

Latest

CVE-2021-1125, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.