Описание
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.2 (включая)
Одновременно
cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00015
Низкий
5.5 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.
EPSS
Процентиль: 2%
0.00015
Низкий
5.5 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-200