Vulnerability · Published Jun 23, 2023 · Assigned by nvidia
CVE-2023-25520
Medium 4.4
In plain English
A medium-severity improper input validation in Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.2%top 93.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX | All versions prior to 32.7.4 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H