← volver
CVE-2022-28195

CVE-2022-28195

CVSS 5.7 MEDIUMEPSS 0.2%CWE-20
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.7EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
27 abr 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →