← Back

CVE-2017-6283

nvd nist
Published: Mar 6, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.

Affected (2)

Nvidia
1 product
Shield Tv Firmware
Google
1 product
Android
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Shield Tv Firmware
Up to 6.2
Running on/withPlatform Versions
Nvidia
Shield Tv
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Android
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@nvidia.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.