CVE-2021-32025

highPriorität · verfolgen · 31EPSS 0.002 · 7. PerzentilCAEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.18% (7th) EPSS

CVSS 7.2 · high

Is it mine?

19 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.18.8highAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.1highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.1highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · secure@blackberry.com CAAusnutzbarkeit 1.4 · Auswirkung 6

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-269USCWE-368US

betroffene Produkte (19)

Betroffene Produkte und Versionsbereiche.

BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX SDP 6.4.0 to 7.0enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Medical versions 2.0.0 safety product compliant with IEC 62304enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Safety versions 1.0.0 to 1.0.2 safety products compliant with IEC 61508 and/or ISO 26262enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Safety versions 2.0.0 to 2.0.1 safety products compliant with IEC 61508 and/or ISO 26262enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX Momentics all 6.3.x versionsenisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Medical versions 1.0.0 to 1.1.1 safety products compliant with IEC 62304enisa_euvdEU
BlackBerry Limited QNX≤ 1.0.3fstec_bduRU
BlackBerry Limited QNX≤ 1.1.2fstec_bduRU
BlackBerry Limited QNX Momentics Development Suite≤ 6.3.2fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.6.0fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.4.1fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.5.0 SP1fstec_bduRU
blackberry qnx momentics= 6.3.0nvdUScpe:2.3:a:blackberry:qnx_momentics:*:*:*:*:*:*:*:*
blackberry qnx momentics= 6.3.2nvdUScpe:2.3:a:blackberry:qnx_momentics:*:*:*:*:*:*:*:*
blackberry qnx os for medical1.0 → 1.1.2nvdUScpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:*
blackberry qnx os for medical= 2.0.0nvdUScpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:*
blackberry qnx os for safety1.0.0 → 1.0.3nvdUScpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:*
blackberry qnx os for safety2.0.0 → 2.0.2nvdUScpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:*
blackberry qnx software development platform6.4.0 → 7.0nvdUScpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

veröffentlicht 2022-03-10geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan