CyberRota Analysis
AI-GeneratedNVIDIA UFM Enterprise is vulnerable due to a flaw in its plugin management API, allowing authenticated users with low privileges to inject malicious code through specially crafted API requests. Exploiting this vulnerability could result in code execution, privilege escalation, and potential information disclosure. Organizations using NVIDIA UFM Enterprise should prioritize addressing this issue to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosure.