CVE Feed

    Dashboard / CVE / CVE-2017-7932

    CVE-2017-7932

    An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, and i.MX 6QuadPlus. When the device is configured in security enabled configuration, under certain conditions it is possible to bypass the signature verification by using a specially crafted certificate leading to the execution of an unsigned image.

    Published:Aug 7, 2017
    Last Modified:Apr 20, 2025
    EPS:Aug 7, 2017
    EPSS Score:0.00024
    CVSS Score:6

    Affected Products

    Vendor
    Nxp
    Product
    I.mx 28
    Vendor
    Nxp
    Product
    I.mx 28 Firmware
    Vendor
    Nxp
    Product
    I.mx 50
    Vendor
    Nxp
    Product
    I.mx 50 Firmware
    Vendor
    Nxp
    Product
    I.mx 53
    Vendor
    Nxp
    Product
    I.mx 53 Firmware
    Vendor
    Nxp
    Product
    I.mx 6dual
    Vendor
    Nxp
    Product
    I.mx 6dual Firmware
    Vendor
    Nxp
    Product
    I.mx 6duallite
    Vendor
    Nxp
    Product
    I.mx 6duallite Firmware
    Vendor
    Nxp
    Product
    I.mx 6dualplus
    Vendor
    Nxp
    Product
    I.mx 6dualplus Firmware
    Vendor
    Nxp
    Product
    I.mx 6quad
    Vendor
    Nxp
    Product
    I.mx 6quad Firmware
    Vendor
    Nxp
    Product
    I.mx 6quadplus
    Vendor
    Nxp
    Product
    I.mx 6quadplus Firmware
    Vendor
    Nxp
    Product
    I.mx 6solo
    Vendor
    Nxp
    Product
    I.mx 6solo Firmware
    Vendor
    Nxp
    Product
    I.mx 6sololite
    Vendor
    Nxp
    Product
    I.mx 6sololite Firmware
    Vendor
    Nxp
    Product
    I.mx 6solox
    Vendor
    Nxp
    Product
    I.mx 6solox Firmware
    Vendor
    Nxp
    Product
    I.mx 6ull
    Vendor
    Nxp
    Product
    I.mx 6ull Firmware
    Vendor
    Nxp
    Product
    I.mx 6ultralite
    Vendor
    Nxp
    Product
    I.mx 6ultralite Firmware
    Vendor
    Nxp
    Product
    I.mx 7dual
    Vendor
    Nxp
    Product
    I.mx 7dual Firmware
    Vendor
    Nxp
    Product
    I.mx 7solo
    Vendor
    Nxp
    Product
    I.mx 7solo Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf30nn151cku26
    Vendor
    Nxp
    Product
    Vybrid Mvf30nn151cku26 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf30ns151cku26
    Vendor
    Nxp
    Product
    Vybrid Mvf30ns151cku26 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf50nn151cmk40
    Vendor
    Nxp
    Product
    Vybrid Mvf50nn151cmk40 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf50nn151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf50nn151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf50ns151cmk40
    Vendor
    Nxp
    Product
    Vybrid Mvf50ns151cmk40 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf50ns151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf50ns151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf51nn151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf51nn151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf51ns151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf51ns151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf60nn151cmk40
    Vendor
    Nxp
    Product
    Vybrid Mvf60nn151cmk40 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf60nn151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf60nn151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf60ns151cmk40
    Vendor
    Nxp
    Product
    Vybrid Mvf60ns151cmk40 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf60ns151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf60ns151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf61nn151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf61nn151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf61ns151cmk50
    Vendor
    Nxp
    Product
    Vybrid Mvf61ns151cmk50 Firmware
    Vendor
    Nxp
    Product
    Vybrid Mvf62nn151cmk40
    Vendor
    Nxp
    Product
    Vybrid Mvf62nn151cmk40 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High