Vulnerability Details : CVE-2021-31532
Potential exploit
NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.
Products affected by CVE-2021-31532
- cpe:2.3:o:nxp:lpc55s69jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s66jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s69jev98_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpcs66jev98_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s69jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpcs66jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:i.mx_rt500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:i.mx_rt600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s28_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s26_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5528_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5526_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s16jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s16jev98_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s16jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s14jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc55s14jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5516jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5516jev98_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5516jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5514jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5514jbd64_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5512jbd100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nxp:lpc5512jbd64_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-31532
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 31 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-31532
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
6.8
|
MEDIUM | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
0.9
|
5.9
|
NIST |
References for CVE-2021-31532
-
https://www.nxp.com
NXP® Semiconductors Official Site | HomeVendor Advisory
-
https://oxide.computer/blog/lpc55/
Oxide Computer Company: Exploiting Undocumented Hardware Blocks in the LPC55S69Exploit;Third Party Advisory
Jump to