CVE-2022-22819
High
Description
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature is verified. This can allow an attacker to achieve non-persistent code execution via a crafted unsigned update.
SeverityHigh
CVSS7.8
Exploit probability—
ProductNxp Lpc55s66jbd64 Firmware
PublishedMar 23, 2022
First seenMar 23, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nxp lpc55s66jbd64_firmware | No range specified | — |
| nxp lpc55s66jbd100_firmware | No range specified | — |
| nxp lpc55s66jev98_firmware | No range specified | — |
| nxp lpc55s69jbd64_firmware | No range specified | — |
| nxp lpc55s69jbd100_firmware | No range specified | — |
| nxp lpc55s69jev98_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.