CVE-2021-33881: Medium severity nxp mifare ultralight ev1 firmware vulnerability
On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation, physical access control, etc.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-33881?
CVE-2021-33881 is a vulnerability that allows an attacker to interrupt a write operation on NXP MIFARE Ultralight and NTAG cards, bypassing a Monotonic Counter protection mechanism.
What is the severity of CVE-2021-33881?
CVE-2021-33881 has a severity rating of 4.2 (medium).
How does CVE-2021-33881 impact public transportation?
The impact of CVE-2021-33881 on public transportation depends on how the anti tear-off feature is used in specific applications.
Are there any resources to learn more about CVE-2021-33881?
Yes, you can refer to the following resources for more information: [An article on RFID Monotonic Counter Anti-Tearing Defeated](https://blog.quarkslab.com/rfid-monotonic-counter-anti-tearing-defeated.html), [NXP Application Note AN11340](https://www.nxp.com/docs/en/application-note/AN11340.pdf), [NXP Application Note AN13089](https://www.nxp.com/docs/en/application-note/AN13089.pdf).
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-33881?
CVE-2021-33881 is associated with CWE-863.