Rewterz

Rewterz Threat Alert – MuddyWater – Active IOCs

June 23, 2021
Rewterz

Rewterz Threat Alert – Remcos RAT – Active IOCs

June 23, 2021

Rewterz Threat Advisory – Multiple NVIDIA Jetson Chipsets Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-34372

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.

CVE-2021-34397

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to a limited denial of service.

Impact

  • Denial of Service
  • Information Disclosure

Affected Vendors

NVIDIA

Affected Products

  • Jetson

Remediation

Refer to vendor’s advisory for the list of upgraded patches.

https://nvidia.custhelp.com/app/answers/detail/a_id/5205/~/security-bulletin%3A-nvidia-jetson-agx-xavier-series%2C-jetson-xavier-nx%2C-jetson

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.