NVIDIA Jetson chipset contains a series of security holes that allow data theft, DDoS attacks
A series of new critical security vulnerabilities have been found in the Jetson chip framework (NVIDIA) that could affect millions of active graphics cards worldwide.
Evaluation from experts shows that these vulnerabilities can completely be abused by hackers to carry out denial of service (DDoS) attacks, and even steal the target's data, according to the report. from Threat Post.
Nvidia has now confirmed the problem and will soon release a patch in the near future. There are a total of 9 vulnerabilities, all rated at high severity. With that said, these vulnerabilities exist in the Jetson framework, so could directly affect millions of IoT devices running NVIDIA Jetson chips, including embedded systems, AI applications, and even devices. Independent automation such as robots, drones, etc.
Some of the affected products identified include Jetson Nano devices (including Jetson Nano 2GB), Xavier NX/TX1, AGX Xavier, Jetson TX2 (including Jetson TX2 NX).
The most serious flaw
Out of the 9 vulnerabilities mentioned above, CVE-2021-34372 is rated as the most severe case, which can expose the Jetson framework to attack through a buffer overflow. While the NVIDIA Security Bulletin explains that an attacker needs access to the local network to carry out such an attack, please note that that's all the hacker needs.
In other words, this is a fairly easy vulnerability to exploit. Once infiltrated, an attacker can take control of the target system by gaining permanent access to various components, not just the NVIDIA chipset, thereby manipulating or sabotaging the system.
Besides CVE-2021-34372, the remaining 8 vulnerabilities include:
- CVE‑2021‑34380
- CVE‑2021‑34379
- CVE‑2021‑34378
- CVE‑2021‑34376
- CVE‑2021‑34377
- CVE‑2021‑34373
- CVE‑2021‑34374
- CVE‑2021‑34375
It should be noted that all of these vulnerabilities have a severity rating of 7 to 7.9 on the CVSS scale. Most of the vulnerabilities affect Jetson's trusted Linux kernel and target the component's heap memory frame. From there, the chipset can be easily manipulated to create various errors. Furthermore, six of these vulnerabilities can be exploited to trigger DDoS attacks.
You should read it
- AMD CPUs also have security vulnerabilities that have existed for many years now!
- Techniques of exploiting buffer overflow errors - Part II
- What to do to protect the device from ZombieLoad attack?
- Detected a serious BIOS vulnerability, affecting many Intel processors
- Detecting a new Linux vulnerability allows hackers to gain control of the VPN connection
- Specter V2 vulnerability re-appears to attack Intel, Arm CPUs, AMD chips are not affected
- New zero-day vulnerability warning in Windows Search, Windows protocol nightmare getting worse
- Microsoft urgently patched zero-day vulnerability after 2 years of refusing to acknowledge it
- New vulnerability on MediaTek chip makes 30% of Android smartphones can be eavesdropped
- Apple releases iOS 14.4.2, iOS 12.5.2, and watchOS 7.3.3 updates that patch the critical zero-day vulnerability
- Critical Vulnerability Discovered in 3 WordPress Plugins, Affects 84,000 Websites
- GitLab patches critical vulnerability that allows hackers to take control of accounts
Maybe you are interested
How to check MacBook battery status Should water basins be placed in air-conditioned rooms? Foods that help increase memory How to choose the right fruit for your body Microsoft reminds users that Windows Server 20H2 is about to be discontinued Cryptocurrency Insurance: This Domain Could Be a Big Industry in the Coming Futur