CVE-2020-5974 - NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges

Back Back to CVE browser

HIGH

NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges

Published Jul 8, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.29%

Description

NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges.

Affected products

Vendor NVIDIA Product NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T Default
n/a
- Version
  JetPack SDK 4.2, 4.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T

n/a

Version	Status	Constraints
JetPack SDK 4.2, 4.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27128
Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5039
x_refsource_CONFIRMMitigationVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27128		Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5039		x_refsource_CONFIRMMitigationVendor Advisory