Vulnerability Details : CVE-2019-5700
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Vulnerability category: Input validationDenial of serviceInformation leak
Products affected by CVE-2019-5700
- cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-5700
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 10 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-5700
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2019-5700
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-5700
-
https://nvidia.custhelp.com/app/answers/detail/a_id/4875
Security Bulletin: NVIDIA SHIELD TV - October 2019 | NVIDIAVendor Advisory
-
https://nvidia.custhelp.com/app/answers/detail/a_id/4910
Security Bulletin: Jetson AGX Xavier, TK1, TX1, TX2, and Nano L4T- December 2019 | NVIDIA
Jump to