{"id":"CVE-2021-27562","vendor_project":"Arm","product":"Trusted Firmware","vulnerability_name":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","date_added":"2021-11-03","due_date":"2021-11-17","known_ransomware_use":"Unknown","short_description":"Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-787","cvss_version":"3.1","cvss_severity":"MEDIUM","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","nvd_published":"2021-05-25","nvd_status":"Analyzed","epss":0.03093,"epss_percentile":0.87168,"cvss_score":5.5,"days_published_to_kev":162,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2021-27562","by":"CyberMax"}