CVE-2017-7932
Summary
| CVE | CVE-2017-7932 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-07 08:29:00 UTC |
| Updated | 2019-10-09 23:30:00 UTC |
| Description | An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image. |
Risk And Classification
Problem Types: CWE-295
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Nxp | I.mx 28 | - | All | All | All |
| Hardware | Nxp | I.mx 28 | - | All | All | All |
| Operating System | Nxp | I.mx 28 Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 28 Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 50 | - | All | All | All |
| Hardware | Nxp | I.mx 50 | - | All | All | All |
| Operating System | Nxp | I.mx 50 Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 50 Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 53 | - | All | All | All |
| Hardware | Nxp | I.mx 53 | - | All | All | All |
| Operating System | Nxp | I.mx 53 Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 53 Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6dual | - | All | All | All |
| Hardware | Nxp | I.mx 6dual | - | All | All | All |
| Hardware | Nxp | I.mx 6duallite | - | All | All | All |
| Hardware | Nxp | I.mx 6duallite | - | All | All | All |
| Operating System | Nxp | I.mx 6duallite Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6duallite Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6dualplus | - | All | All | All |
| Hardware | Nxp | I.mx 6dualplus | - | All | All | All |
| Operating System | Nxp | I.mx 6dualplus Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6dualplus Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6dual Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6dual Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6quad | - | All | All | All |
| Hardware | Nxp | I.mx 6quad | - | All | All | All |
| Hardware | Nxp | I.mx 6quadplus | - | All | All | All |
| Hardware | Nxp | I.mx 6quadplus | - | All | All | All |
| Operating System | Nxp | I.mx 6quadplus Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6quadplus Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6quad Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6quad Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6solo | - | All | All | All |
| Hardware | Nxp | I.mx 6solo | - | All | All | All |
| Hardware | Nxp | I.mx 6sololite | - | All | All | All |
| Hardware | Nxp | I.mx 6sololite | - | All | All | All |
| Operating System | Nxp | I.mx 6sololite Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6sololite Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6solox | - | All | All | All |
| Hardware | Nxp | I.mx 6solox | - | All | All | All |
| Operating System | Nxp | I.mx 6solox Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6solox Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6solo Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6solo Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6ull | - | All | All | All |
| Hardware | Nxp | I.mx 6ull | - | All | All | All |
| Operating System | Nxp | I.mx 6ull Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6ull Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 6ultralite | - | All | All | All |
| Hardware | Nxp | I.mx 6ultralite | - | All | All | All |
| Operating System | Nxp | I.mx 6ultralite Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 6ultralite Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 7dual | - | All | All | All |
| Hardware | Nxp | I.mx 7dual | - | All | All | All |
| Operating System | Nxp | I.mx 7dual Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 7dual Firmware | - | All | All | All |
| Hardware | Nxp | I.mx 7solo | - | All | All | All |
| Hardware | Nxp | I.mx 7solo | - | All | All | All |
| Operating System | Nxp | I.mx 7solo Firmware | - | All | All | All |
| Operating System | Nxp | I.mx 7solo Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf30nn151cku26 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf30nn151cku26 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf30nn151cku26 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf30nn151cku26 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf30ns151cku26 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf30ns151cku26 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf30ns151cku26 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf30ns151cku26 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50nn151cmk40 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50nn151cmk40 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50nn151cmk40 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50nn151cmk40 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50nn151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50nn151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50nn151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50nn151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50ns151cmk40 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50ns151cmk40 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50ns151cmk40 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50ns151cmk40 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50ns151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf50ns151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50ns151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf50ns151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf51nn151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf51nn151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf51nn151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf51nn151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf51ns151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf51ns151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf51ns151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf51ns151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60nn151cmk40 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60nn151cmk40 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60nn151cmk40 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60nn151cmk40 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60nn151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60nn151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60nn151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60nn151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60ns151cmk40 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60ns151cmk40 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60ns151cmk40 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60ns151cmk40 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60ns151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf60ns151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60ns151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf60ns151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf61nn151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf61nn151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf61nn151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf61nn151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf61ns151cmk50 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf61ns151cmk50 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf61ns151cmk50 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf61ns151cmk50 Firmware | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf62nn151cmk40 | - | All | All | All |
| Hardware | Nxp | Vybrid Mvf62nn151cmk40 | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf62nn151cmk40 Firmware | - | All | All | All |
| Operating System | Nxp | Vybrid Mvf62nn151cmk40 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple i.MX Products Multiple Local Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| NXP i.MX Product Family | ICS-CERT | MISC | ics-cert.us-cert.gov | Third Party Advisory, US Government Resource, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.