CVE-2024-0138: Critical severity nvidia base command manager vulnerability

Published Nov 22, 2024

Updated

NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected Software

1 affected component

Nvidia Base Command Manager

Event History

Nov 22, 2024

CVE Published

via MITRE·11:21 PM

Data Sourced

via MITRE·11:21 PM

DescriptionSeverityWeakness

Nov 23, 2024

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0138?

CVE-2024-0138 is considered to be a high severity vulnerability due to the potential for code execution and privilege escalation.

How do I fix CVE-2024-0138?

To remediate CVE-2024-0138, update the NVIDIA Base Command Manager to the latest version that addresses this vulnerability.

What components are affected by CVE-2024-0138?

CVE-2024-0138 specifically affects the CMDaemon component of the NVIDIA Base Command Manager.

What are the potential impacts of exploiting CVE-2024-0138?

Exploiting CVE-2024-0138 may result in code execution, denial of service, information disclosure, and data tampering.

Is CVE-2024-0138 specific to any version of NVIDIA Base Command Manager?

CVE-2024-0138 is applicable to all versions of NVIDIA Base Command Manager that contain the identified missing authentication vulnerability.