The NVIDIA Infrastructure Controller for Linux contains a vulnerability identified as CWE-306 (Missing Authentication for Critical Function). This flaw allows an attacker to bypass authentication controls on a critical function, potentially leading to unauthorized data manipulation, service disruption, and leakage of sensitive information. The CVSS 3.1 base score is 8.3, reflecting high severity with attack vector as adjacent network, low attack complexity, no privileges required, and no user interaction needed. The vulnerability is published and assigned by NVIDIA but lacks explicit patch or remediation details in the provided data.

Successful exploitation could lead to unauthorized data tampering, denial of service conditions, and information disclosure. The vulnerability does not require privileges or user interaction and can be exploited from an adjacent network, increasing the risk in environments where the Infrastructure Controller is accessible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitoring NVIDIA's advisories for updates is recommended. No vendor advisory content indicates that the issue is already mitigated or requires no action.