CVE-2024-0105
Published: Nov 1, 2024
Modified: Nov 1, 2024
CVSS v3.1
8.9
Description
NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
| Vendor | Product | Versions |
|---|---|---|
NVIDIA | ConnectX4 | affected All versions prior to 12.28.2302 |
NVIDIA | ConnectX4 LX | affected All versions prior to xx.32.1900 |
NVIDIA | ConnectX GA | affected All versions prior to xx.41.1000 |
NVIDIA | ConnectX LTS22 | affected All versions prior to xx.35.4030 |
NVIDIA | ConnectX LTS23 | affected All versions prior to xx.39.3560 |
NVIDIA | BlueField 1 | affected All versions prior to 18.31.1014 |
NVIDIA | BlueField GA | affected All versions prior to xx.41.1000 |
NVIDIA | BlueField LTS22 | affected All versions prior to xx.35.4030 |
NVIDIA | BlueField LTS23 | affected All versions prior to xx.39.3560 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now