CVE-2017-7932

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image.

• CWE-295
• CWE-295

• http://www.securityfocus.com/bid/99966Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02Third Party Advisory, US Government Resource, VDB Entry
• http://www.securityfocus.com/bid/99966Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-152-02Third Party Advisory, US Government Resource, VDB Entry

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7926A Cross-Site Request Forgery issue was discovered in OSIsoft…
• CVE-2017-7927A Use of Password Hash Instead of Password for Authenticatio…
• CVE-2017-7928An Improper Access Control issue was discovered in Schweitze…
• CVE-2017-7929An Absolute Path Traversal issue was discovered in Advantech…
• CVE-2017-7930An Improper Authentication issue was discovered in OSIsoft P…
• CVE-2017-7931In ABB IP GATEWAY 3.39 and prior, by accessing a specific un…
• CVE-2017-7933In ABB IP GATEWAY 3.39 and prior, some configuration files c…
• CVE-2017-7934An Improper Authentication issue was discovered in OSIsoft P…
• CVE-2017-7935A Resource Exhaustion issue was discovered in Phoenix Contac…
• CVE-2017-7936A stack-based buffer overflow issue was discovered in NXP i.…
• CVE-2017-7937An Improper Authentication issue was discovered in Phoenix C…
• CVE-2017-7938Stack-based buffer overflow in DMitry (Deepmagic Information…6.6