CVE-2021-32025
High
Description
An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.
SeverityHigh
CVSS8.1
Exploit probability—
ProductBlackberry Qnx Momentics
PublishedMar 10, 2022
First seenMar 10, 2022
Weakness typeCWE-368CWE-368
How to fix
Update
- blackberry qnx_os_for_medical1.1.2 or later
- blackberry qnx_os_for_safety1.0.3, 2.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry qnx_momentics | 6.3.0, 6.3.2 | — |
| blackberry qnx_software_development_platform | 6.4.0 ≤ v ≤ 7.0 | — |
| blackberry qnx_os_for_medical | 1.0 ≤ v < 1.1.2, 2.0.0 | 1.1.2 |
| blackberry qnx_os_for_safety | 1.0.0 ≤ v < 1.0.3, 2.0.0 ≤ v < 2.0.2 | 1.0.3, 2.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.