CVE-2019-5679

CWE-287 — Improper Authentication3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 87.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Shield ExperienceNvidia Shield TV
Timeline
PublishedAug 6
Latest updateMay 24

Description

NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of service, or escalation of privileges

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5nvidia/shield_tvSHIELD Experience prior to v8.0

🔴Vulnerability Details

2
GHSA
GHSA-rjg6-f836-fcpw: NVIDIA Shield TV Experience prior to v8↗2022-05-24
▶
CVEList
CVE-2019-5679: NVIDIA Shield TV Experience prior to v8↗2019-08-06
▶
CVE-2019-5679 (HIGH CVSS 7.8) | NVIDIA Shield TV Experience prior t | cvebase.io