CVEvulnerability

CVE-2017-7932

6.0 MEDIUM Published 2017-08-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.0 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-295

Description

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image.

Affected configurations

• nxp vybrid mvf30nn151cku26 firmware • nxp vybrid mvf30ns151cku26 firmware • nxp vybrid mvf50nn151cmk40 firmware • nxp vybrid mvf50nn151cmk50 firmware • nxp vybrid mvf50ns151cmk40 firmware • nxp vybrid mvf50ns151cmk50 firmware • nxp vybrid mvf51nn151cmk50 firmware • nxp vybrid mvf51ns151cmk50 firmware • nxp vybrid mvf60nn151cmk40 firmware • nxp vybrid mvf60ns151cmk40 firmware • nxp vybrid mvf60nn151cmk50 firmware • nxp vybrid mvf60ns151cmk50 firmware • nxp vybrid mvf61nn151cmk50 firmware • nxp vybrid mvf61ns151cmk50 firmware • nxp vybrid mvf62nn151cmk40 firmware • nxp i.mx 50 firmware • nxp i.mx 53 firmware • nxp i.mx 6ull firmware • nxp i.mx 6ultralite firmware • nxp i.mx 6sololite firmware • nxp i.mx 6solo firmware • nxp i.mx 6duallite firmware • nxp i.mx 6solox firmware • nxp i.mx 6dual firmware • nxp i.mx 6quad firmware • nxp i.mx 6quadplus firmware • nxp i.mx 6dualplus firmware • nxp i.mx 28 firmware • nxp i.mx 7dual firmware • nxp i.mx 7solo firmware

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References