CVE-2021-33881 - CVE House
Back to Database
Status published Medium CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can...

Vulnerability Description

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation, physical access control, etc.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33881

Credits & Attribution

No credits recorded in the NVD database.

References

More from nxp

View All →
CVE-2022-45163
An information-disclosure vulnerability exists on select NXP devices when configured...
Medium 5.3
CVE-2022-22819
NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM...
High 7.8
CVE-2021-44479
NXP Kinetis K82 devices have a buffer over-read via a...
Medium 6.1
CVE-2021-40154
NXP LPC55S69 devices before A3 have a buffer over-read via...
Medium 6.1
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer...
High 7.8

Affected Vendor

Affected Software

mifare ultralight ev1 firmware, mifare ultralight c firmware, mifare ultralight nano firmware, ntag 210 firmware, ntag 212 firmware, ntag 213 firmware, ntag 215 firmware, ntag 216 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: June 6th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.