CVE-2020-5958 — Untrusted Search Path in Nvidia Geforce Experience

CWE-426 — Untrusted Search Path4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 65.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Nvidia Geforce ExperienceNvidia Quadro FirmwareNvidia Tesla Firmware+1 more
Timeline
PublishedMar 11
Latest updateMay 24

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDnvidia/tesla_firmware440 — 440.33.01
▶NVDnvidia/quadro_firmware390 — 392.59+3
▶NVDnvidia/geforce_experience440 — 442.50

🔴Vulnerability Details

2
GHSA
GHSA-9jww-fm9p-j95x: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system↗2022-05-24
▶
CVEList
CVE-2020-5958: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system↗2020-03-11
▶

💥Exploits & PoCs

1
Exploit-DB
libupnp 1.6.18 - Stack-based buffer overflow (DoS)↗2020-11-27
▶
CVE-2020-5958 — Untrusted Search Path in Nvidia | cvebase