Nxp LPC55S69JBD100 Firmware vulnerabilities

3 CVEs affecting Nxp LPC55S69JBD100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22819, published 2022-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22819, published 2022-03-23. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature…
CVE-2021-40154, published 2021-12-01. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses…
CVE-2021-31532, published 2021-05-06. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A)…