Privilege Escalation Vulnerability in NVIDIA Camera Firmware
CVE-2021-1113

4.7MEDIUM

Key Information:

Vendor
Nvidia
Status
Jetson Agx Xavier Series, Jetson Xavier Nx, Jetson Tx2 Series, Jetson Tx2 Nx, Jetson Nano, Jetson Nano 2gb, Jetson Tx1
Vendor
CVE Published:
11 August 2021

Summary

The NVIDIA camera firmware has a vulnerability that allows a highly privileged attacker to unauthorizedly modify camera resources. This exploitation can lead to significant service disruption and may result in partial data loss for all clients reliant on this firmware. It is crucial for users to apply the latest updates to mitigate this risk.

Affected Version(s)

Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson Nano, Jetson Nano 2GB, Jetson TX1 All Jetson Linux versions prior to r32.6.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5216
x_refsource_CONFIRM

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.