High severity · published Nov 20, 2021
CVE-2021-23217
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only…
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GG
Geforce GT 605 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 610 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 620 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 625 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 630 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 635 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 640 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 705 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 710 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 720 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 730 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 740 · Nvidia
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-23217
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-23217
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5263
More from Geforce GT 605
4.4
CVE-2021-34400
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed…
4.4
CVE-2021-34399
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed…
4.4
CVE-2021-1125
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data
4.4
CVE-2021-1105
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime,…
4.4
CVE-2021-1088
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient…