{"id":"CVE-2024-0148","aliases":["EUVD-2024-15947","GHSA-ppxx-pr9w-7ww8"],"status":"published","title":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode,...","description":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00289,"percentile":0.21579,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-447"],"published":"2025-02-25T20:11:21Z","modified":"2026-06-17T06:52:52Z","products":[{"vendor":"nvidia","product":"igx orin"},{"vendor":"nvidia","product":"jetson agx orin series"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5617"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0148"},{"url":"https://github.com/advisories/GHSA-ppxx-pr9w-7ww8"}],"sources":{"cve":[{"id":"CVE-2024-0148","description":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.","status":"published","published":"2025-02-25T20:11:21.328Z","modified":"2025-02-25T21:20:53.416Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-447"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-15947","description":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.","status":"published","published":"2025-02-25T20:11:21Z","modified":"2025-02-25T21:20:53Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:23.677257Z"}],"ghsa":[{"id":"GHSA-ppxx-pr9w-7ww8","title":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode,...","description":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.","status":"published","published":"2025-02-25T21:31:44Z","modified":"2025-02-25T21:31:51Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-447"],"updated_at":"2026-11-02T15:00:03.228993Z"}],"nvd":[{"id":"CVE-2024-0148","description":"NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.","status":"published","published":"2025-02-25T21:15:14.7Z","modified":"2026-06-17T06:52:52.387Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-447"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}