What is CVE-2021-1070?

CVE-2021-1070 is a high-severity vulnerability in NVIDIA Jetson Agx Xavier. CVSS score: 7.1/10. Published 2021-01-26.

How severe is CVE-2021-1070?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in NVIDIA Jetson Agx Xavier

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

EPSS: 0.003 (23.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Nvidia Jetson_agx_xavier
Nvidia Jetson_nano
Nvidia Jetson_nano_2gb
Nvidia Jetson_tx1
Nvidia Jetson_tx2
Nvidia Jetson_xavier_nx
Nvidia Linux_for_tegra
Nvidia Jetson Agx Xavier Series, Nx, Tx1, Tx2, Nano And 2gb — versions All L4T versions prior to r32.5

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1070?: CVE-2021-1070 is a high-severity vulnerability in NVIDIA Jetson Agx Xavier. CVSS score: 7.1/10. Published 2021-01-26.
How severe is CVE-2021-1070?: High severity. CVSS v3 base score is 7.1 out of 10.