CVE Feed

    Dashboard / CVE / CVE-2019-5672

    CVE-2019-5672

    NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to information disclosure.

    Published:Apr 11, 2019
    Last Modified:Nov 21, 2024
    EPS:Apr 11, 2019
    EPSS Score:0.00282
    CVSS Score:9.1

    Affected Products

    Vendor
    Nvidia
    Product
    Jetson Tx1
    Vendor
    Nvidia
    Product
    Jetson Tx2

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-33177 (CVSS 5.5) — NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations…
    CVE-2025-33182 (CVSS 7.6) — NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged use…
    CVE-2024-0108 (CVSS 8.7) — NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail …
    CVE-2022-42269 (CVSS 7.9) — NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input m…
    CVE-2021-34400 (CVSS 4.1) — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user w…
    CVE-2021-34399 (CVSS 4.1) — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user w…
    CVE-2021-23219 (CVSS 4.1) — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user …
    CVE-2021-23217 (CVSS 7.5) — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user …
    CVE-2021-23201 (CVSS 7.5) — NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user w…
    CVE-2021-1125 (CVSS 4.1) — NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user w…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High