CVE-2021-33881
Medium
Description
On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation, physical access control, etc.
SeverityMedium
CVSS4.2
Exploit probability—
ProductNxp Mifare Ultralight Ev1 Firmware
PublishedJun 6, 2021
First seenJun 6, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nxp mifare_ultralight_ev1_firmware | No range specified | — |
| nxp mifare_ultralight_c_firmware | No range specified | — |
| nxp mifare_ultralight_nano_firmware | No range specified | — |
| nxp ntag_210_firmware | No range specified | — |
| nxp ntag_212_firmware | No range specified | — |
| nxp ntag_213_firmware | No range specified | — |
| nxp ntag_215_firmware | No range specified | — |
| nxp ntag_216_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.