CVEvulnerability
CVE-2021-41613
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The write logic of Exception Effective Address Register (EEAR) is not implemented correctly. User programs from authorized privilege levels will be unable to write to EEAR.
Affected configurations
• openrisc mor1kx firmware (< 5.1)
References
- https://github.com/openrisc/mor1kx/issues/141 Vendor Advisory
- https://seth.engr.tamu.edu/software-releases/thehuzz/ Third Party Advisory
- https://github.com/openrisc/mor1kx/issues/141 Vendor Advisory
- https://seth.engr.tamu.edu/software-releases/thehuzz/ Third Party Advisory