CVE-2024-0148
Published: 25 February 2025
Summary
CVE-2024-0148 is a high-severity Unimplemented or Unsupported Feature in UI (CWE-447) vulnerability in Custhelp (inferred from references). Its CVSS base score is 7.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique System Firmware (T1542.001); ranked at the 21.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 PE-3 (Physical Access Control) and SC-41 (Port and I/O Device Access).
Deeper analysis
CVE-2024-0148 affects the UEFI firmware RCM boot mode in NVIDIA Jetson Linux and IGX OS images. The vulnerability enables an unprivileged attacker with physical access to the device to load untrusted code, which could result in code execution, escalation of privileges, data tampering, denial of service, and information disclosure. Impacts may extend to other components. It carries a CVSS v3.1 base score of 7.6 (AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) and is linked to CWE-447.
Exploitation requires physical access to the device (AV:P) by an unprivileged attacker (PR:N) with low complexity (AC:L) and no user interaction (UI:N). Successful attacks can achieve high impacts on confidentiality, integrity, and availability, with a changed scope (S:C) potentially affecting additional components beyond the vulnerable one.
The NVIDIA security advisory provides details on mitigation and patching; refer to https://nvidia.custhelp.com/app/answers/detail/a_id/5617 for guidance.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-15947
Vulnerability details
NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation…
more
of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Vulnerability in UEFI firmware boot mode allows physical attacker to load untrusted code, directly enabling system firmware compromise for initial code execution and persistence.
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Prevents unprivileged attackers from gaining the physical access to the device required to enter RCM boot mode and load untrusted code.
Requires timely identification, reporting, and correction of the specific flaw in UEFI firmware RCM boot mode, directly mitigating the vulnerability via patching.
Restricts physical access to ports, connectors, and I/O devices exploited in RCM boot mode to load untrusted code.