Uncontrolled Search Path Vulnerability in NVIDIA GeForce Experience
CVE-2020-5977

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Geforce Experience Software
Vendor
CVE Published:
23 October 2020

What is CVE-2020-5977?

A vulnerability exists in NVIDIA GeForce Experience due to an uncontrolled search path in the NodeJS web server utilized by NVIDIA Web Helper. This flaw can potentially allow malicious actors to execute arbitrary code, escalate privileges, and disclose sensitive information, as well as instigate denial of service conditions. Users are advised to update to version 3.20.5.70 or later to mitigate these risks.

Affected Version(s)

NVIDIA GeForce Experience Software All versions prior to 3.20.5.70

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5076
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.