CVE-2001-0903

Published Nov 20, 2001

Last updated 8 years ago

Overview

Description: Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:intel:high-bandwidth_digital_content_protection:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C16A19D4-3B00-4872-A3B2-915B44321137"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References