CVE-2024-0148
High
Description
NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.
SeverityHigh
CVSS7.6
Exploit probability—
ProductJetson AGX Orin Series
PublishedFeb 25, 2025
First seenFeb 25, 2025
Weakness typeCWE-447CWE-447
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NVIDIA Jetson AGX Orin Series | All versions prior to 36.4.3 | — |
| NVIDIA IGX Orin | All versions prior to IGX 1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.