CVE-2024-0148 — HIGH (7.6) — White Hats Nepal

Vulnerability Description

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-447

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5617

FAQ

What is CVE-2024-0148?

CVE-2024-0148 is a vulnerability with a CVSS score of 7.6 (HIGH). NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A success...

How severe is CVE-2024-0148?

CVE-2024-0148 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-0148?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.