PT-2023-1475 · Nvidia · Nvidia Geforce Experience

Minse Kim · Published 2023-01-30 · Updated 2023-02-14 · CVE-2022-31611

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience (affected versions not specified)

Description The issue is related to an uncontrolled search path vulnerability in the client installers of NVIDIA GeForce Experience. This vulnerability can be exploited by an attacker with user-level privileges to load an arbitrary DLL when the installer is launched, potentially leading to escalation of privileges and code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-00884

CVE-2022-31611

Affected Products

Nvidia Geforce Experience

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-31611 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5384 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00884 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31611 · Vendor Advisory
• https://t.me/cibsecurity/57647 · Telegram Post