CVE-2020-5977 - NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure

Back Back to CVE browser

HIGH

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure

Published Oct 23, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.43%

Description

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Affected products

Vendor NVIDIA Product NVIDIA GeForce Experience Software Default
n/a
- Version
  All versions prior to 3.20.5.70
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

NVIDIA GeForce Experience Software

n/a

Version	Status	Constraints
All versions prior to 3.20.5.70	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27131
Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5076
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27131		Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5076		x_refsource_CONFIRMPatchVendor Advisory