Vulnerability-Lookup

BDU:2022-04174 (CVE-2021-3675)

Vulnerability from fstec – Published: 2022-07-06 – Updated: 2022-07-06 – View on bdu.fstec.ru Fixed

Title

Уязвимость библиотеки synaTEE.signed.dll драйвера отпечатков пальцев Synaptics Fingerprint Driver микропрограммного обеспечения ноутбуков Lenovo, позволяющие нарушителю раскрыть защищаемую информацию

Summary

Уязвимость библиотеки synaTEE.signed.dll драйвера отпечатков пальцев Synaptics Fingerprint Driver микропрограммного обеспечения ноутбуков Lenovo связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:N/A:N

5.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2021-3675, LEN-68054

References

3 references

URL
https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797
https://support.lenovo.com/us/en/product_security/LEN-68054
https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-securi…

Impacted products

106 products from 1 vendor

Vendors

Lenovo Group Limited

Products

25 (Type 20K7) Laptop (ThinkPad), A275 (Type 20KC, 20KD) Laptop (ThinkPad), A285 (Type 20MW, 20MX) Laptop (ThinkPad), A475 (Type 20KL, 20KM) Laptop (ThinkPad), A485 (Type 20MU, 20MV) Laptop (ThinkPad), E14 (Type 20RA, 20RB) Laptop (ThinkPad), E14 Gen 2 (Type 20TA, 20TB) Laptop (ThinkPad), E15 (Type 20RD, 20RE) Laptop (ThinkPad), E15 Gen 2 (Type 20TD, 20TE) Laptop (ThinkPad), E480 (Type 20KN, 20KQ) Laptop (ThinkPad), E490 (Type 20N8, 20N9) Laptop (ThinkPad), E580 (Type 20KS 20KT) Laptop (ThinkPad), E590 (Type 20NB, 20NC) Laptop (ThinkPad), L380 (type 20M5, 20M6) Laptops (ThinkPad), L380 Yoga (type 20M7, 20M8) Laptops (ThinkPad), L390 (type 20NR, 20NS) Laptops (ThinkPad), L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad), L480 (type 20LS, 20LT) Laptops (ThinkPad), L580 (type 20LW, 20LX) Laptops (ThinkPad), P50 Laptop (ThinkPad), P51 (Type 20HH, 20HJ) Laptop (ThinkPad), P51 (Type 20MM, 20MN) Laptop (ThinkPad), P51s (Type 20HB, 20HC) Laptop (ThinkPad), P51s (Type 20JY, 20K0) Laptop (ThinkPad), P52 (Type 20M9, 20MA) Laptop (ThinkPad), P52s (Type 20LB, 20LC) Laptop (ThinkPad), P70 Laptop (ThinkPad), P71 (type 20HK, 20HL) Laptop (Thinkpad), P72 (type 20MB, 20MC) Laptop (Thinkpad), P73 (type 20QR, 20QS) Laptop (Thinkpad), T460p Laptop (ThinkPad), T460s Laptop (ThinkPad), T470 (Type 20HD, 20HE) Laptop (ThinkPad), T470 (Type 20JM, 20JN) Laptop (ThinkPad), T470p Laptop (ThinkPad), T470s (type 20HF, 20HG) Laptop (ThinkPad), T470s (type 20JS, 20JT) Laptop (ThinkPad), T480 (Type 20L5, 20L6) Laptop (ThinkPad), T480s (type 20L7, 20L8) Laptop (ThinkPad), T570 (Type 20H9, 20HA) Laptop (ThinkPad), T570 (Type 20JW, 20JX) Laptop (ThinkPad), ThinkPad R14 Gen 2 Type 20TC PRC, ThinkPad S3 2nd Gen type 20RG China only, ThinkPad X1 Tablet 2nd Gen (Type 20JB, 20JC), X1 Carbon 4th Gen (Type 20FB, 20FC) Laptop (ThinkPad), X1 Carbon 5th Gen - Kabylake (Type 20HR, 20HQ) Laptop (ThinkPad), X1 Carbon 5th Gen - Skylake (Type 20K4, 20K3) Laptop (ThinkPad), X1 Carbon 6th Gen - (Type 20KH, 20KG) Laptop (ThinkPad), X1 Extreme 1st Gen (Type 20MF, 20MG) Laptop (ThinkPad), X1 Yoga 1st Gen (Type 20FQ, 20FR) Laptop (ThinkPad), X1 Yoga 2nd Gen (Type 20JD, 20JE, 20JF, 20JG) Laptop (ThinkPad), X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG) Laptop (ThinkPad), X270 (Type 20HN, 20HM) Laptop (ThinkPad), X270 (Type 20K6, 20K5) Laptop (ThinkPad), X380 Yoga Laptop (ThinkPad), ThinkPad Yoga 260, Yoga 370 Laptop (ThinkPad)

Versions

до 5.2.3541.26 (25 (Type 20K7) Laptop (ThinkPad)), до 5.2.3541.26 (A275 (Type 20KC, 20KD) Laptop (ThinkPad)), до 5.3.3543.26 (A285 (Type 20MW, 20MX) Laptop (ThinkPad)), до 5.2.3541.26 (A475 (Type 20KL, 20KM) Laptop (ThinkPad)), до 5.3.3543.26 (A485 (Type 20MU, 20MV) Laptop (ThinkPad)), до 6.0.31.1108 (E14 (Type 20RA, 20RB) Laptop (ThinkPad)), до 6.0.31.1108 (E14 Gen 2 (Type 20TA, 20TB) Laptop (ThinkPad)), до 6.0.31.1108 (E15 (Type 20RD, 20RE) Laptop (ThinkPad)), до 6.0.31.1108 (E15 Gen 2 (Type 20TD, 20TE) Laptop (ThinkPad)), до 5.02.0325.0026 (E480 (Type 20KN, 20KQ) Laptop (ThinkPad)), до 5.02.0325.0026 (E490 (Type 20N8, 20N9) Laptop (ThinkPad)), до 5.02.0325.0026 (E580 (Type 20KS 20KT) Laptop (ThinkPad)), до 5.02.0325.0026 (E590 (Type 20NB, 20NC) Laptop (ThinkPad)), - (L380 (type 20M5, 20M6) Laptops (ThinkPad)), - (L380 Yoga (type 20M7, 20M8) Laptops (ThinkPad)), - (L390 (type 20NR, 20NS) Laptops (ThinkPad)), - (L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad)), до 5.03.3543.0026 (L480 (type 20LS, 20LT) Laptops (ThinkPad)), до 5.03.3543.0026 (L580 (type 20LW, 20LX) Laptops (ThinkPad)), до 5.1.340.26 (P50 Laptop (ThinkPad)), до 5.2.3541.26 (P51 (Type 20HH, 20HJ) Laptop (ThinkPad)), до 5.2.3541.26 (P51 (Type 20MM, 20MN) Laptop (ThinkPad)), до 5.2.3541.26 (P51s (Type 20HB, 20HC) Laptop (ThinkPad)), до 5.2.3541.26 (P51s (Type 20JY, 20K0) Laptop (ThinkPad)), до 5.3.3543.26 (P52 (Type 20M9, 20MA) Laptop (ThinkPad)), до 5.3.3543.26 (P52s (Type 20LB, 20LC) Laptop (ThinkPad)), до 5.1.340.26 (P70 Laptop (ThinkPad)), до 5.2.3541.26 (P71 (type 20HK, 20HL) Laptop (Thinkpad)), до 5.3.3543.26 (P72 (type 20MB, 20MC) Laptop (Thinkpad)), до 5.3.3543.26 (P73 (type 20QR, 20QS) Laptop (Thinkpad)), до 5.1.340.26 (T460p Laptop (ThinkPad)), до 5.1.340.26 (T460s Laptop (ThinkPad)), до 5.2.3541.26 (T470 (Type 20HD, 20HE) Laptop (ThinkPad)), до 5.2.3541.26 (T470 (Type 20JM, 20JN) Laptop (ThinkPad)), до 5.2.3541.26 (T470p Laptop (ThinkPad)), до 5.2.3541.26 (T470s (type 20HF, 20HG) Laptop (ThinkPad)), до 5.2.3541.26 (T470s (type 20JS, 20JT) Laptop (ThinkPad)), до 5.3.3543.26 (T480 (Type 20L5, 20L6) Laptop (ThinkPad)), до 5.3.3543.26 (T480s (type 20L7, 20L8) Laptop (ThinkPad)), до 5.2.3541.26 (T570 (Type 20H9, 20HA) Laptop (ThinkPad)), до 5.3.3543.26 (T570 (Type 20JW, 20JX) Laptop (ThinkPad)), до 6.0.31.1108 (ThinkPad R14 Gen 2 Type 20TC PRC), до 6.0.31.1108 (ThinkPad S3 2nd Gen type 20RG China only), - (ThinkPad X1 Tablet 2nd Gen (Type 20JB, 20JC)), до 5.1.340.26 (X1 Carbon 4th Gen (Type 20FB, 20FC) Laptop (ThinkPad)), до 5.2.3541.26 (X1 Carbon 5th Gen - Kabylake (Type 20HR, 20HQ) Laptop (ThinkPad)), до 5.2.3541.26 (X1 Carbon 5th Gen - Skylake (Type 20K4, 20K3) Laptop (ThinkPad)), до 5.3.3543.26 (X1 Carbon 6th Gen - (Type 20KH, 20KG) Laptop (ThinkPad)), до 5.3.3543.26 (X1 Extreme 1st Gen (Type 20MF, 20MG) Laptop (ThinkPad)), до 5.1.340.26 (X1 Yoga 1st Gen (Type 20FQ, 20FR) Laptop (ThinkPad)), до 5.2.3541.26 (X1 Yoga 2nd Gen (Type 20JD, 20JE, 20JF, 20JG) Laptop (ThinkPad)), до 5.3.3543.26 (X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG) Laptop (ThinkPad)), до 5.2.3541.26 (X270 (Type 20HN, 20HM) Laptop (ThinkPad)), до 5.2.3541.26 (X270 (Type 20K6, 20K5) Laptop (ThinkPad)), до 5.3.3543.26 (X380 Yoga Laptop (ThinkPad)), до 5.1.340.26 (ThinkPad Yoga 260), до 5.2.3541.26 (Yoga 370 Laptop (ThinkPad))

Product types

Firmware

Mitigations

Использование рекомендаций: https://support.lenovo.com/ru/en/product_security/len-68054

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5.2.3541.26 (25 (Type 20K7) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (A275 (Type 20KC, 20KD) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (A285 (Type 20MW, 20MX) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (A475 (Type 20KL, 20KM) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (A485 (Type 20MU, 20MV) Laptop (ThinkPad)), \u0434\u043e 6.0.31.1108 (E14 (Type 20RA, 20RB) Laptop (ThinkPad)), \u0434\u043e 6.0.31.1108 (E14 Gen 2 (Type 20TA, 20TB) Laptop (ThinkPad)), \u0434\u043e 6.0.31.1108 (E15 (Type 20RD, 20RE) Laptop (ThinkPad)), \u0434\u043e 6.0.31.1108 (E15 Gen 2 (Type 20TD, 20TE) Laptop (ThinkPad)), \u0434\u043e 5.02.0325.0026 (E480 (Type 20KN, 20KQ) Laptop (ThinkPad)), \u0434\u043e 5.02.0325.0026 (E490 (Type 20N8, 20N9) Laptop (ThinkPad)), \u0434\u043e 5.02.0325.0026 (E580 (Type 20KS 20KT) Laptop (ThinkPad)), \u0434\u043e 5.02.0325.0026 (E590 (Type 20NB, 20NC) Laptop (ThinkPad)), - (L380 (type 20M5, 20M6) Laptops (ThinkPad)), - (L380 Yoga (type 20M7, 20M8) Laptops (ThinkPad)), - (L390 (type 20NR, 20NS) Laptops (ThinkPad)), - (L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad)), \u0434\u043e 5.03.3543.0026 (L480 (type 20LS, 20LT) Laptops (ThinkPad)), \u0434\u043e 5.03.3543.0026 (L580 (type 20LW, 20LX) Laptops (ThinkPad)), \u0434\u043e 5.1.340.26 (P50 Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (P51 (Type 20HH, 20HJ) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (P51 (Type 20MM, 20MN) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (P51s (Type 20HB, 20HC) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (P51s (Type 20JY, 20K0) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (P52 (Type 20M9, 20MA) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (P52s (Type 20LB, 20LC) Laptop (ThinkPad)), \u0434\u043e 5.1.340.26 (P70 Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (P71 (type 20HK, 20HL) Laptop (Thinkpad)), \u0434\u043e 5.3.3543.26 (P72 (type 20MB, 20MC) Laptop (Thinkpad)), \u0434\u043e 5.3.3543.26 (P73 (type 20QR, 20QS) Laptop (Thinkpad)), \u0434\u043e 5.1.340.26 (T460p Laptop (ThinkPad)), \u0434\u043e 5.1.340.26 (T460s Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T470 (Type 20HD, 20HE) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T470 (Type 20JM, 20JN) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T470p Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T470s (type 20HF, 20HG) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T470s (type 20JS, 20JT) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (T480 (Type 20L5, 20L6) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (T480s (type 20L7, 20L8) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (T570 (Type 20H9,20HA) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (T570 (Type 20JW, 20JX) Laptop (ThinkPad)), \u0434\u043e 6.0.31.1108 (ThinkPad R14 Gen 2 Type 20TC PRC), \u0434\u043e 6.0.31.1108 (ThinkPad S3 2nd Gen type 20RG China only), - (ThinkPad X1 Tablet 2nd Gen (Type 20JB, 20JC)), \u0434\u043e 5.1.340.26 (X1 Carbon 4th Gen (Type 20FB, 20FC) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (X1 Carbon 5th Gen - Kabylake (Type 20HR, 20HQ) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (X1 Carbon 5th Gen - Skylake (Type 20K4, 20K3) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (X1 Carbon 6th Gen - (Type 20KH, 20KG) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (X1 Extreme 1st Gen (Type 20MF, 20MG) Laptop (ThinkPad)), \u0434\u043e 5.1.340.26 (X1 Yoga 1st Gen (Type 20FQ, 20FR) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (X1 Yoga 2nd Gen (Type 20JD, 20JE, 20JF, 20JG) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (X270 (Type 20HN, 20HM) Laptop (ThinkPad)), \u0434\u043e 5.2.3541.26 (X270 (Type 20K6, 20K5) Laptop (ThinkPad)), \u0434\u043e 5.3.3543.26 (X380 Yoga Laptop (ThinkPad)), \u0434\u043e 5.1.340.26 (ThinkPad Yoga 260), \u0434\u043e 5.2.3541.26 (Yoga 370 Laptop (ThinkPad))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.lenovo.com/ru/en/product_security/len-68054",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.06.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.07.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.07.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-04174",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-3675, LEN-68054",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "25 (Type 20K7) Laptop (ThinkPad), A275 (Type 20KC, 20KD) Laptop (ThinkPad), A285 (Type 20MW, 20MX) Laptop (ThinkPad), A475 (Type 20KL, 20KM) Laptop (ThinkPad), A485 (Type 20MU, 20MV) Laptop (ThinkPad), E14 (Type 20RA, 20RB) Laptop (ThinkPad), E14 Gen 2 (Type 20TA, 20TB) Laptop (ThinkPad), E15 (Type 20RD, 20RE) Laptop (ThinkPad), E15 Gen 2 (Type 20TD, 20TE) Laptop (ThinkPad), E480 (Type 20KN, 20KQ) Laptop (ThinkPad), E490 (Type 20N8, 20N9) Laptop (ThinkPad), E580 (Type 20KS 20KT) Laptop (ThinkPad), E590 (Type 20NB, 20NC) Laptop (ThinkPad), L380 (type 20M5, 20M6) Laptops (ThinkPad), L380 Yoga (type 20M7, 20M8) Laptops (ThinkPad), L390 (type 20NR, 20NS) Laptops (ThinkPad), L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad), L480 (type 20LS, 20LT) Laptops (ThinkPad), L580 (type 20LW, 20LX) Laptops (ThinkPad), P50 Laptop (ThinkPad), P51 (Type 20HH, 20HJ) Laptop (ThinkPad), P51 (Type 20MM, 20MN) Laptop (ThinkPad), P51s (Type 20HB, 20HC) Laptop (ThinkPad), P51s (Type 20JY, 20K0) Laptop (ThinkPad), P52 (Type 20M9, 20MA) Laptop (ThinkPad), P52s (Type 20LB, 20LC) Laptop (ThinkPad), P70 Laptop (ThinkPad), P71 (type 20HK, 20HL) Laptop (Thinkpad), P72 (type 20MB, 20MC) Laptop (Thinkpad), P73 (type 20QR, 20QS) Laptop (Thinkpad), T460p Laptop (ThinkPad), T460s Laptop (ThinkPad), T470 (Type 20HD, 20HE) Laptop (ThinkPad), T470 (Type 20JM, 20JN) Laptop (ThinkPad), T470p Laptop (ThinkPad), T470s (type 20HF, 20HG) Laptop (ThinkPad), T470s (type 20JS, 20JT) Laptop (ThinkPad), T480 (Type 20L5, 20L6) Laptop (ThinkPad), T480s (type 20L7, 20L8) Laptop (ThinkPad), T570 (Type 20H9,20HA) Laptop (ThinkPad), T570 (Type 20JW, 20JX) Laptop (ThinkPad), ThinkPad R14 Gen 2 Type 20TC PRC, ThinkPad S3 2nd Gen type 20RG China only, ThinkPad X1 Tablet 2nd Gen (Type 20JB, 20JC), X1 Carbon 4th Gen (Type 20FB, 20FC) Laptop (ThinkPad), X1 Carbon 5th Gen - Kabylake (Type 20HR, 20HQ) Laptop (ThinkPad), X1 Carbon 5th Gen - Skylake (Type 20K4, 20K3) Laptop (ThinkPad), X1 Carbon 6th Gen - (Type 20KH, 20KG) Laptop (ThinkPad), X1 Extreme 1st Gen (Type 20MF, 20MG) Laptop (ThinkPad), X1 Yoga 1st Gen (Type 20FQ, 20FR) Laptop (ThinkPad), X1 Yoga 2nd Gen (Type 20JD, 20JE, 20JF, 20JG) Laptop (ThinkPad), X1 Yoga 3rd Gen (Type 20LD, 20LE, 20LF, 20LG) Laptop (ThinkPad), X270 (Type 20HN, 20HM) Laptop (ThinkPad), X270 (Type 20K6, 20K5) Laptop (ThinkPad), X380 Yoga Laptop (ThinkPad), ThinkPad Yoga 260, Yoga 370 Laptop (ThinkPad)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 synaTEE.signed.dll \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432 Synaptics Fingerprint Driver \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 synaTEE.signed.dll \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432 Synaptics Fingerprint Driver \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797\nhttps://support.lenovo.com/us/en/product_security/LEN-68054\nhttps://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

CVE-2021-3675 (GCVE-0-2021-3675)

Vulnerability from cvelistv5 – Published: 2022-06-16 16:15 – Updated: 2024-09-16 17:38

Title

synaTEE.signed.dll Out-Of-Bounds Heap Write

Summary

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-20 - Improper Input Validation

Assigner

Synaptics mitre root Scorecard

References

3 references

URL	Tags
https://synaptics.com/sites/default/files/2022-06…	x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC
https://support.hp.com/us-en/document/ish_6411153…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Synaptics	Synaptics Fingerprint Driver	Affected: 5.1.xxx.26 , < xxx=340 (custom) Affected: 5.2.xxxx.26 , < xxxx=3541 (custom) Affected: 5.2.2xx.26 , < xx=29 (custom) Affected: 5.2.3xx.26 , < xx=25 (custom) Affected: 5.3.xxxx.26 , < xxxx=3543 (custom) Affected: 5.5.xx.1058 , < xx=44 (custom) Affected: 5.5.xx.1102 , < xx=34 (custom) Affected: 5.5.xx.1116 , < xx=14 (custom) Affected: 6.0.xx.1104 , < xx=50 (custom) Affected: 6.0.xx.1108 , < xx=31 (custom) Affected: 6.0.xx.1111 , < xx=58 (custom)

Date Public

2022-06-14 00:00

Credits

Synaptics would like to thank Tobias Cloosters and Johannes Willbold for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:01:08.336Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-68054"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x86/64"
          ],
          "product": "Synaptics Fingerprint Driver",
          "vendor": "Synaptics",
          "versions": [
            {
              "lessThan": "xxx=340",
              "status": "affected",
              "version": "5.1.xxx.26",
              "versionType": "custom"
            },
            {
              "lessThan": "xxxx=3541",
              "status": "affected",
              "version": "5.2.xxxx.26",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=29",
              "status": "affected",
              "version": "5.2.2xx.26",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=25",
              "status": "affected",
              "version": "5.2.3xx.26",
              "versionType": "custom"
            },
            {
              "lessThan": "xxxx=3543",
              "status": "affected",
              "version": "5.3.xxxx.26",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=44",
              "status": "affected",
              "version": "5.5.xx.1058",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=34",
              "status": "affected",
              "version": "5.5.xx.1102",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=14",
              "status": "affected",
              "version": "5.5.xx.1116",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=50",
              "status": "affected",
              "version": "6.0.xx.1104",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=31",
              "status": "affected",
              "version": "6.0.xx.1108",
              "versionType": "custom"
            },
            {
              "lessThan": "xx=58",
              "status": "affected",
              "version": "6.0.xx.1111",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Synaptics would like to thank Tobias Cloosters and Johannes Willbold for reporting this issue."
        }
      ],
      "datePublic": "2022-06-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-06-16T16:15:00.000Z",
        "orgId": "54bb2a58-4278-44a9-851f-17e74ee51f48",
        "shortName": "Synaptics"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-68054"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Listed drivers and above have additional input validation."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "synaTEE.signed.dll Out-Of-Bounds Heap Write",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT@synaptics.com",
          "DATE_PUBLIC": "2022-06-14T22:44:00.000Z",
          "ID": "CVE-2021-3675",
          "STATE": "PUBLIC",
          "TITLE": "synaTEE.signed.dll Out-Of-Bounds Heap Write"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Synaptics Fingerprint Driver",
                      "version": {
                        "version_data": [
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.1.xxx.26",
                            "version_value": "xxx=340"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.2.xxxx.26",
                            "version_value": "xxxx=3541"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.2.2xx.26",
                            "version_value": "xx=29"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.2.3xx.26",
                            "version_value": "xx=25"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.3.xxxx.26",
                            "version_value": "xxxx=3543"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.5.xx.1058",
                            "version_value": "xx=44"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.5.xx.1102",
                            "version_value": "xx=34"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "5.5.xx.1116",
                            "version_value": "xx=14"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "6.0.xx.1104",
                            "version_value": "xx=50"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "6.0.xx.1108",
                            "version_value": "xx=31"
                          },
                          {
                            "platform": "x86/64",
                            "version_affected": "\u003c",
                            "version_name": "6.0.xx.1111",
                            "version_value": "xx=58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Synaptics"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Synaptics would like to thank Tobias Cloosters and Johannes Willbold for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf",
              "refsource": "CONFIRM",
              "url": "https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-68054",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-68054"
            },
            {
              "name": "https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797",
              "refsource": "MISC",
              "url": "https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Listed drivers and above have additional input validation."
          }
        ],
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "54bb2a58-4278-44a9-851f-17e74ee51f48",
    "assignerShortName": "Synaptics",
    "cveId": "CVE-2021-3675",
    "datePublished": "2022-06-16T16:15:00.966Z",
    "dateReserved": "2021-08-02T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:38:29.835Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2022-04174 (CVE-2021-3675)

CVE-2021-3675 (GCVE-0-2021-3675)

Tags

Sightings

Nomenclature

Related by attack behaviour