CVE-2019-5672
Last modified
CVE-2019-5672 is a vulnerability of currently unknown severity. NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to information disclosure.. EPSS estimates a 1.41% chance of exploitation in the next 30 days.
Description
NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to information disclosure.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Tx1 | < r28.3 |
| Nvidia | Jetson Tx2 | < r28.3 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/4787Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4787Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5672?
How severe is CVE-2019-5672?
How do I fix CVE-2019-5672?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-5666NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5667NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5668NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5669NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5670NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5671NVIDIA Windows GPU Display Driver contains a vulnerability i…
- CVE-2019-5673NVIDIA Jetson TX2 contains a vulnerability in the kernel dri…
- CVE-2019-5674NVIDIA GeForce Experience before 3.18 contains a vulnerabili…
- CVE-2019-5675NVIDIA Windows GPU Display driver software for Windows (all …
- CVE-2019-5676NVIDIA Windows GPU Display driver software for Windows (all …6.7
- CVE-2019-5677NVIDIA Windows GPU Display driver software for Windows (all …
- CVE-2019-5678NVIDIA GeForce Experience versions prior to 3.19 contains a …
Are you affected by CVE-2019-5672?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
