CVE-2021-31532 - CVE House
Back to Database
Status published Medium CVE-2021-31532

NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev...

Vulnerability Description

NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31532

Credits & Attribution

No credits recorded in the NVD database.

References

More from nxp

View All →
CVE-2022-45163
An information-disclosure vulnerability exists on select NXP devices when configured...
Medium 5.3
CVE-2022-22819
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM...
High 7.8
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a...
Medium 6.1
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via...
Medium 6.1
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer...
High 7.8

Affected Vendor

Affected Software

lpc55s69jbd100 firmware, lpc55s66jbd100 firmware, lpc55s69jev98 firmware, lpcs66jev98 firmware, lpc55s69jbd64 firmware, lpcs66jbd64 firmware, i.mx rt500 firmware, i.mx rt600 firmware, lpc55s28 firmware, lpc55s26 firmware, lpc5528 firmware, lpc5526 firmware, lpc55s16jbd100 firmware, lpc55s16jev98 firmware, lpc55s16jbd64 firmware, lpc55s14jbd100 firmware, lpc55s14jbd64 firmware, lpc5516jbd100 firmware, lpc5516jev98 firmware, lpc5516jbd64 firmware, lpc5514jbd100 firmware, lpc5514jbd64 firmware, lpc5512jbd100 firmware, lpc5512jbd64 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: May 6th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.