CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. See the original NVD description below for full technical details.
CVE
CVE-2021-26370
Severity
HIGH
CVSS
7.1
EPSS
0.22%
Original NVD Description
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)