Medium severity · published May 6, 2021
CVE-2021-31532
NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x…
6.8
CVSS
0.5%
EPSS
No
On KEV
Description
NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IR
I.mx Rt500 Firmware · Nxp
All versions, or not specified · source: NVD
IR
I.mx Rt600 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5512jbd100 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5512jbd64 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5514jbd100 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5514jbd64 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5516jbd100 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5516jbd64 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5516jev98 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5526 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc5528 Firmware · Nxp
All versions, or not specified · source: NVD
LF
Lpc55s14jbd100 Firmware · Nxp
All versions, or not specified · source: NVD
