Medium severity · published Nov 20, 2021
CVE-2021-23219
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by…
4.1
CVSS
0.2%
EPSS
No
On KEV
Description
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and loading vulnerable microcode. Such an attack may lead to information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Dgx Station A100 · Nvidia
All versions, or not specified · source: NVD
DP
Dgx-1 P100 · Nvidia
All versions, or not specified · source: NVD
DV
Dgx-1 V100 · Nvidia
All versions, or not specified · source: NVD
DG
Dgx-2 · Nvidia
All versions, or not specified · source: NVD
DC
Drive Constellation · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 605 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 610 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 620 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 625 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 630 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 635 · Nvidia
All versions, or not specified · source: NVD
GG
Geforce GT 640 · Nvidia
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-23219
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-23219
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5263
More from Dgx Station A100
4.4
CVE-2021-34400
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed…
4.4
CVE-2021-34399
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed…
4.4
CVE-2021-1125
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data
4.4
CVE-2021-1105
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime,…
4.4
CVE-2021-1088
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient…