✕
Request a Demo
Rewterz
Rewterz Threat Alert – Squirrelwaffle Exploits ProxyLogon and ProxyShell Infect Systems
November 23, 2021
Rewterz
Rewterz Threat Advisory – CVE-2021-38681 – QNAP NAS Vulnerability
November 24, 2021

Rewterz Threat Advisory – Multiple NVIDIA GPU and Tegra Hardware Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2021-34400 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2021-1088 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2021-1105 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2021-1125 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to bypass security restrictions, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to corrupt program data.

CVE-2021-23217 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to execute arbitrary code on the system, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2021-23201 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to cause information disclosure, data corruption, or denial of service of the device.

CVE-2021-23219 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2021-34399 

NVIDIA GPU and Tegra Hardware could allow a local authenticated attacker to obtain sensitive information, caused by a flaw in the internal microcontroller. By executing a specially-crafted program, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

  • Information Disclosure
  • Security Bypass
  • Code Execution

Affected Vendors

NVIDIA

Affected Products

  • NVIDIA vGPU Software 8.8
  • NVIDIA vGPU Software 11.5
  • NVIDIA vGPU Software 12.3
  • NVIDIA vGPU Software 13.0

Remediation

Refer to NVIDIA Security Advisory for patch, upgrade, or suggested workaround information.

https://nvidia.custhelp.com/app/answers/detail/a_id/5263