What is the CVSS score of CVE-2021-23201?

CVE-2021-23201 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Geforce Gtx 950 CVE-2021-23201

HIGH

2021-11-20 psirt@nvidia.com

Denial Of Service Nvidia Information Disclosure Geforce Gtx 950 Geforce Gtx 960 Geforce Gtx 970 Geforce Gtx 980 Geforce Gtx Titan X Jetson Nano Jetson Tx1 Quadro M1000M Quadro M1200 Quadro M2000 Quadro M2000M Quadro M2200 Quadro M3000M Quadro M4000 Quadro M4000M Quadro M5000 Quadro M5000M Quadro M500M Quadro M520 Quadro M5500 Quadro M6000 Quadro M600M Quadro M620 Shield Tv Shield Tv Pro Tesla M10 Tesla M2050 Tesla M2070 Tesla M2070Q Tesla M2090 Tesla M4 Tesla M40 Tesla M6 Tesla M60 Tesla P100

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Nov 20, 2021 - 15:15 nvd

HIGH 7.5

DescriptionNVD

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.

AnalysisAI

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.