CVSS 3.1
7.6 highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2024-0148
NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
- CWE
- CWE-447
- Published
- Modified
- Record from
- the NVD, synced