PT-2019-4366 · Nvidia · Nvidia Tegra Bootloader+1
Publicado
2019-08-06
·
Atualizado
2020-08-24
·
CVE-2019-5679
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NVIDIA Shield TV Experience versions prior to v8.0
NVIDIA Tegra bootloader versions (affected versions not specified)
Description
The issue is related to errors in privilege management in the nvtboot component of the NVIDIA Tegra bootloader in the NVIDIA Shield TV Experience software. Exploitation of this issue may allow an attacker to cause a denial of service, execute arbitrary code, or escalate their privileges. The vulnerability is also associated with improper authentication of the Trusted OS image, which may lead to code execution, denial of service, escalation of privileges, or information disclosure.
Recommendations
For NVIDIA Shield TV Experience versions prior to v8.0, update to version v8.0 or later to resolve the issue.
For NVIDIA Tegra bootloader, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Nvidia Shield Tv Experience
Nvidia Tegra Bootloader