What is the CVSS score of CVE-2021-1088?

CVE-2021-1088 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Dgx 1 P100 CVE-2021-1088

MEDIUM

2021-11-20 psirt@nvidia.com

Nvidia Information Disclosure Dgx 1 P100 Dgx 1 V100 Dgx 2 Dgx Station A100 Drive Constellation Geforce Gt 605 Geforce Gt 610 Geforce Gt 620 Geforce Gt 625 Geforce Gt 630 Geforce Gt 635 Geforce Gt 640 Geforce Gt 705 Geforce Gt 710 Geforce Gt 720 Geforce Gt 730 Geforce Gt 740 Geforce Gtx 1050 Geforce Gtx 1050 Ti Geforce Gtx 1060 Geforce Gtx 1070 Geforce Gtx 1070 Ti Geforce Gtx 1080 Geforce Gtx 1080 Ti Geforce Gtx 1650 Geforce Gtx 1650 Super Geforce Gtx 1660 Geforce Gtx 1660 Super Geforce Gtx 1660 Ti Geforce Gtx 645 Geforce Gtx 650 Geforce Gtx 650 Ti Geforce Gtx 650 Ti Boost Geforce Gtx 660 Geforce Gtx 660 Ti Geforce Gtx 670 Geforce Gtx 680 Geforce Gtx 690 Geforce Gtx 745 Geforce Gtx 750 Geforce Gtx 750 Ti Geforce Gtx 760 Geforce Gtx 760 Ti Geforce Gtx 770 Geforce Gtx 780 Geforce Gtx 780 Ti Geforce Gtx 950 Geforce Gtx 960 Geforce Gtx 970 Geforce Gtx 980 Geforce Gtx Titan X Geforce Rtx 2060 Geforce Rtx 2060 Super Geforce Rtx 2070 Geforce Rtx 2070 Super Geforce Rtx 2080 Geforce Rtx 2080 Super Geforce Rtx 2080 Ti Gtx Titan Gtx Titan Black Gtx Titan Z Jetson Agx Xavier 16Gb Jetson Agx Xavier 32Gb Jetson Agx Xavier 8Gb Jetson Nano Jetson Tx1 Jetson Tx2 Jetson Tx2 4Gb Jetson Tx2 Nx Jetson Tx2I Jetson Xavier Nx Nvidia Hgx 2 Nvidia T1000 Nvidia T2000 Nvidia T4 Nvidia T400 Nvidia T600 Quadro Gv100 Quadro M1000M Quadro M1200 Quadro M2000 Quadro M2000M Quadro M2200 Quadro M3000M Quadro M4000 Quadro M4000M Quadro M5000 Quadro M5000M Quadro M500M Quadro M520 Quadro M5500 Quadro M6000 Quadro M600M Quadro M620 Quadro P1000 Quadro P2000 Quadro P2200 Quadro P3000 Quadro P3200 Quadro P400 Quadro P4000 Quadro P4200 Quadro P500 Quadro P5000 Quadro P520 Quadro P5200 Quadro P600 Quadro P6000 Quadro P620 Quadro Rtx 3000 Quadro Rtx 4000 Quadro Rtx 5000 Quadro Rtx 6000 Quadro Rtx 8000 Quadro T1000 Quadro T2000 Quadro T400 Quadro T600 Shield Tv Shield Tv Pro Tesla M10 Tesla M4 Tesla M40 Tesla M6 Tesla M60 Tesla P100 Tesla P4 Tesla P40 Tesla P6 Tesla V100 Tesla V100S Titan Rtx Titan V Titan X Titan Xp

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Nov 20, 2021 - 15:15 nvd

MEDIUM 4.4

DescriptionNVD

AnalysisAI

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control,. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control, which may lead to information disclosure. Affected products include: Nvidia Dgx-1 P100, Nvidia Dgx-1 V100, Nvidia Dgx-2, Nvidia Dgx Station A100, Nvidia Drive Constellation.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.