2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ChatRTX","vendor":"nvidia","versions":[{"status":"affected","version":"All versions prior to and including 0.2.1"}]}],"source":"psirt@nvidia.com"},{"affectedData":[{"cpes":["cpe:2.3:a:nvidia:chatrtx:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"chatrtx","vendor":"nvidia","versions":[{"lessThanOrEqual":"0.2.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nvidia:chatrtx:*:*:*:*:*:*:*:*","matchCriteriaId":"602B4225-8BB8-4B30-A13F-78B0C775840C","versionEndExcluding":"0.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data tampering."},{"lang":"es","value":"NVIDIA ChatRTX para Windows contiene una vulnerabilidad en la interfaz de usuario de Chat RTX, donde un usuario puede causar un problema de administración de privilegios inadecuado al enviar entradas del usuario para cambiar el flujo de ejecución. Una explotación exitosa de esta vulnerabilidad podría dar lugar a la divulgación de información, la escalada de privilegios y la manipulación de datos."}],"id":"CVE-2024-0096","lastModified":"2026-06-17T06:52:46.543","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.1,"impactScore":5.8,"source":"psirt@nvidia.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.1,"impactScore":5.8,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0096","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-10T16:53:17.080134Z","version":"2.0.3"}}]},"published":"2024-05-14T14:39:29.753","references":[{"source":"psirt@nvidia.com","tags":["Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5533"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5533"}],"sourceIdentifier":"psirt@nvidia.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"psirt@nvidia.com","type":"Secondary"}]}
|