1. Home
  2. CVE Database
  3. CVE-2021-1070
HIGH · 7.1

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components i...

Vulnerability Description

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaLinux For Tegra< r32.5
NvidiaJetson Agx Xavier-
NvidiaJetson Nano-
NvidiaJetson Nano 2Gb-
NvidiaJetson Tx1-
NvidiaJetson Tx2-
NvidiaJetson Xavier Nx-

References

FAQ

What is CVE-2021-1070?

CVE-2021-1070 is a vulnerability with a CVSS score of 7.1 (HIGH). NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components i...

How severe is CVE-2021-1070?

CVE-2021-1070 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1070?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Linux For Tegra, Nvidia Jetson Agx Xavier, Nvidia Jetson Nano, Nvidia Jetson Nano 2Gb, Nvidia Jetson Tx1.