NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initializ…

Published 8 y ago 2018-03-06 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.1%

percentile 0%

Public exploits

none known

NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that is unable to protect sensitive data which may lead to information disclosure.This issue is rated as moderate.

Exploit prediction (EPSS)

0.07% probability of exploitation in the next 30 days, higher than 0% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	5.5	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	2.1	`AV:L/AC:L/Au:N/C:P/I:N/A:N`

Affected products

Nvidia Corporation SHIELD TV

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-326 Inadequate Encryption Strength

References

nvidia.custhelp.com /app/answers/detail/a_id/4631 · x_refsource_CONFIRM, x_transferred
nvidia.custhelp.com /app/answers/detail/a_id/4787 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-6284
NVD: CVE-2017-6284

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.