Multiple i.MX Products Multiple Local Security Vulnerabilities
BID:99966
Info
Multiple i.MX Products Multiple Local Security Vulnerabilities
| Bugtraq ID: | 99966 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-7932 CVE-2017-7936 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 26 2017 12:00AM |
| Updated: | Jul 26 2017 12:00AM |
| Credit: | Quarkslab. |
| Vulnerable: |
NXP Semiconductors Vybrid VF5xx 0 NXP Semiconductors Vybrid VF3xx 0 NXP Semiconductors MIFARE Ultralight 0 NXP Semiconductors MIFARE Reader Components 0 NXP Semiconductors MIFARE DESFire EV1 NXP Semiconductors MiFARE Classic 0 NXP Semiconductors iMX 7Solo 0 NXP Semiconductors iMX 7Dual 0 NXP Semiconductors iMX 6UltraLite 0 NXP Semiconductors iMX 6ULL 0 NXP Semiconductors iMX 6SoloX 0 NXP Semiconductors iMX 6SoloLite 0 NXP Semiconductors iMX 6Solo 0 NXP Semiconductors iMX 6QuadPlus 0 NXP Semiconductors iMX 6Quad 0 NXP Semiconductors iMX 6DualPlus 0 NXP Semiconductors iMX 6DualLite 0 NXP Semiconductors iMX 6Dual 0 NXP Semiconductors iMX 53 0 NXP Semiconductors iMX 50 0 NXP Semiconductors iMX 28 0 |
| Not Vulnerable: | |
Discussion
Multiple i.MX Products Multiple Local Security Vulnerabilities
Multiple i.MX Products is prone to multiple local security vulnerabilities.
An attacker may exploit these issues to bypass certain security restrictions and perform unauthorized actions or execute arbitrary code within the context of the application. Failed exploit attempts will likely cause a denial-of-service condition.
Multiple i.MX Products is prone to multiple local security vulnerabilities.
An attacker may exploit these issues to bypass certain security restrictions and perform unauthorized actions or execute arbitrary code within the context of the application. Failed exploit attempts will likely cause a denial-of-service condition.
Exploit / POC
Multiple i.MX Products Multiple Local Security Vulnerabilities
To exploit some of these issues, an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
To exploit some of these issues, an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
Solution / Fix
Multiple i.MX Products Multiple Local Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple i.MX Products Multiple Local Security Vulnerabilities
References:
References: