CVE-2020-5977: High severity nvidia geforce experience vulnerability
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-5977?
The severity of CVE-2020-5977 is high with a CVSS score of 7.8.
What is the vulnerability description of CVE-2020-5977?
CVE-2020-5977 is a vulnerability in NVIDIA GeForce Experience versions prior to 3.20.5.70, where an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Which software versions are affected by CVE-2020-5977?
All versions prior to 3.20.5.70 of NVIDIA GeForce Experience are affected by CVE-2020-5977.
How can CVE-2020-5977 be exploited?
CVE-2020-5977 can be exploited by using an uncontrolled search path to load a malicious node module, potentially leading to code execution, denial of service, escalation of privileges, and information disclosure.
Is there a fix available for CVE-2020-5977?
Yes, upgrading NVIDIA GeForce Experience to version 3.20.5.70 or later will fix the vulnerability.