A display driver installed on the remote Windows host is affected by multiple vulnerabilities, including the following:

  - NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write     arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability     may lead to code execution, denial of service, escalation of privileges, information disclosure, or data     tampering. (CVE-2023-31017)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver     implementation does not restrict or incorrectly restricts access from the named pipe server to a     connecting client, which may lead to potential impersonation to the client's secure context.
    (CVE-2023-31019)

  - NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels     of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to     escalation of privileges. (CVE-2023-31027)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the driver's self-reported version number.

Detections

Analytics

NVIDIA Windows GPU Display Driver (October 2023)

high Nessus Plugin ID 185433

Version 1.5