CVE-2017-6261

EUVD-2017-15322 · Published Jun 5, 2019

NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure.

Technologies

Nvidia Vibrante Linux

Weaknesses

CWE-20CWE-693

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Execution Privilege Escalation Stealth Credential Access Discovery Impact

T1068Exploitation for Privilege Escalation T1040Network Sniffing T1083File and Directory Discovery T1565.002Transmitted Data Manipulation T1574.005Executable Installer File Permissions Weakness T1574.010Services File Permissions Weakness T1611Escape to Host

References

https://data.hackinn.com/ppt/BlackHat-USA-2018/us-18-Liu-Over-The-Air-How-We-Remotely-Compromised-The-Gateway-Bcm-And-Autopilot-Ecus-Of-Tesla-Cars-wp.pdf

Potentially impacted assets

See if this affects your attack surface