How severe is CVE-2018-6258?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in NVIDIA Geforce Experience

CVE-2018-6258

NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle (MitM) attack to obtain sensitive information.

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Nvidia Geforce_experience
Nvidia Corporation Geforce Experience — versions All versions prior to 3.14.1

References

psirt@nvidia.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2018-6258?: CVE-2018-6258 is a medium-severity vulnerability in NVIDIA Geforce Experience. CVSS score: 4.7/10. Published 2018-08-31.
How severe is CVE-2018-6258?: Medium severity. CVSS v3 base score is 4.7 out of 10.