The NVIDIA Infrastructure Controller for Linux has a vulnerability that allows an attacker to use hard‑coded credentials, which can lead to escalation of privileges, data tampering, denial of service, and information disclosure. This flaw is a classic example of a use‑of‑hard‑coded‑credentials weakness that compromises confidentiality, integrity, and availability of the affected system.

The problem occurs in NVIDIA Infrastructure Controller for Linux. No specific version numbers are disclosed in the available data, so all deployments of this product are potentially affected until a patch is applied.

The CVSS score of 9.8 classifies this as critical. The EPSS score is not provided, but the absence of a KEV listing does not diminish the potential impact of the vulnerability. Based on the description, an attacker who can reach the controller can gain access via the embedded credentials, from which privilege escalation and further attacks can proceed. The vulnerability can be exploited remotely or locally depending on the deployment context, with relative ease once access to the target is established.