Vulnerabilities > CVE-2021-1104 - Use of Uninitialized Resource vulnerability in Risc-V Instruction SET Manual
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |