PT-2019-17826 · Nvidia · Nvidia Tegra+1

Publicado 2019-10-09 · Atualizado 2019-12-05 · CVE-2019-5700

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Shield TV Experience versions prior to 8.0.1 NVIDIA Tegra software versions prior to 8.0.1

Description The issue is related to a vulnerability in the bootloader of the NVIDIA Tegra software, where it fails to validate the fields of the boot image. This may result in code execution, denial of service, escalation of privileges, and information disclosure.

Recommendations For NVIDIA Shield TV Experience versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue. For NVIDIA Tegra software versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-5700

Produtos afetados

Nvidia Shield Tv Experience

Nvidia Tegra

Referências · 5

• 🔥 https://github.com/oscardagrach/CVE-2019-5700 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5700 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5700 · Aviso do Fabricante
• https://nvidia.custhelp.com/app/answers/detail/a_id/4875 · Aviso do Fabricante
• https://nvidia.custhelp.com/app/answers/detail/a_id/4910 · Nota