Vulnerabilities > CVE-2021-41614 - Unspecified vulnerability in Openrisc Mor1Kx Firmware

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
openrisc

Summary

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to the Exception Program Counter Register (EPCR) are not implemented correctly. User programs from an unauthorized privilege level can make read/write accesses to EPCR.

Vulnerable Configurations

Part Description Count
OS
Openrisc
1
Hardware
Openrisc
1