CVE-2021-23201 : NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontro

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.

Published 2021-11-20 15:15:08

Updated 2022-02-24 19:13:41

Source NVIDIA Corporation

View at NVD, CVE.org

Vulnerability category: Denial of serviceInformation leak

Products affected by CVE-2021-23201

Nvidia » Quadro M5500 » Version: N/A
cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M5000m » Version: N/A
cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M4000m » Version: N/A
cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M3000m » Version: N/A
cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M2000m » Version: N/A
cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M1000m » Version: N/A
cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M600m » Version: N/A
cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M500m » Version: N/A
cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M6000 » Version: N/A
cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M5000 » Version: N/A
cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M4000 » Version: N/A
cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M2000 » Version: N/A
cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M40 » Version: N/A
cpe:2.3:h:nvidia:tesla_m40:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M2090 » Version: N/A
cpe:2.3:h:nvidia:tesla_m2090:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M2070 » Version: N/A
cpe:2.3:h:nvidia:tesla_m2070:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M2050 » Version: N/A
cpe:2.3:h:nvidia:tesla_m2050:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M6 » Version: N/A
cpe:2.3:h:nvidia:tesla_m6:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M60 » Version: N/A
cpe:2.3:h:nvidia:tesla_m60:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla P100 » Version: N/A
cpe:2.3:h:nvidia:tesla_p100:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Shield Tv » Version: N/A
cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Jetson Tx1 » Version: N/A
cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Jetson Nano » Version: N/A
cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Jetson Nano » Version: N/A
cpe:2.3:h:nvidia:jetson_nano:-:*:-:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Jetson Nano » Version: N/A Developer Kit Edition
cpe:2.3:h:nvidia:jetson_nano:-:*:developer_kit:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Geforce Gtx 950 » Version: N/A
cpe:2.3:h:nvidia:geforce_gtx_950:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Geforce Gtx 960 » Version: N/A
cpe:2.3:h:nvidia:geforce_gtx_960:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Geforce Gtx 970 » Version: N/A
cpe:2.3:h:nvidia:geforce_gtx_970:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Geforce Gtx 980 » Version: N/A
cpe:2.3:h:nvidia:geforce_gtx_980:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Geforce Gtx Titan X » Version: N/A
cpe:2.3:h:nvidia:geforce_gtx_titan_x:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M1200 » Version: N/A
cpe:2.3:h:nvidia:quadro_m1200:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M2200 » Version: N/A
cpe:2.3:h:nvidia:quadro_m2200:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M520 » Version: N/A
cpe:2.3:h:nvidia:quadro_m520:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Quadro M620 » Version: N/A
cpe:2.3:h:nvidia:quadro_m620:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Shield Tv Pro » Version: N/A
cpe:2.3:h:nvidia:shield_tv_pro:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M10 » Version: N/A
cpe:2.3:h:nvidia:tesla_m10:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M4 » Version: N/A
cpe:2.3:h:nvidia:tesla_m4:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Nvidia » Tesla M2070q » Version: N/A
cpe:2.3:h:nvidia:tesla_m2070q:-:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-23201

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-23201

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.5	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
7.5	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	NVIDIA Corporation
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2021-23201

https://nvidia.custhelp.com/app/answers/detail/a_id/5263

Security Notice: NVIDIA GPU and Tegra Hardware - November 2021 | NVIDIA
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-23201

Products affected by CVE-2021-23201

Exploit prediction scoring system (EPSS) score for CVE-2021-23201

CVSS scores for CVE-2021-23201

References for CVE-2021-23201