CVE-2021-31532
Medium
Description
NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.
SeverityMedium
CVSS6.8
Exploit probability—
ProductNxp I.mx Rt500 Firmware
PublishedMay 6, 2021
First seenMay 6, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nxp i.mx_rt500_firmware | No range specified | — |
| nxp lpc55s69jbd100_firmware | No range specified | — |
| nxp lpc55s66jbd100_firmware | No range specified | — |
| nxp lpc55s69jev98_firmware | No range specified | — |
| nxp lpcs66jev98_firmware | No range specified | — |
| nxp lpc55s69jbd64_firmware | No range specified | — |
| nxp lpcs66jbd64_firmware | No range specified | — |
| nxp i.mx_rt600_firmware | No range specified | — |
| nxp lpc55s28_firmware | No range specified | — |
| nxp lpc55s26_firmware | No range specified | — |
| nxp lpc5528_firmware | No range specified | — |
| nxp lpc5526_firmware | No range specified | — |
| nxp lpc55s16jbd100_firmware | No range specified | — |
| nxp lpc55s16jev98_firmware | No range specified | — |
| nxp lpc55s16jbd64_firmware | No range specified | — |
| nxp lpc55s14jbd100_firmware | No range specified | — |
| nxp lpc55s14jbd64_firmware | No range specified | — |
| nxp lpc5516jbd100_firmware | No range specified | — |
| nxp lpc5516jev98_firmware | No range specified | — |
| nxp lpc5516jbd64_firmware | No range specified | — |
| nxp lpc5514jbd100_firmware | No range specified | — |
| nxp lpc5514jbd64_firmware | No range specified | — |
| nxp lpc5512jbd100_firmware | No range specified | — |
| nxp lpc5512jbd64_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.