CVE-2024-0113
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
39.9%
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nvidia | mellanox_os | * | cpe:2.3:o:nvidia:mellanox_os:*:*:*:*:*:mellanox_os_lts:*:* |
| nvidia | mellanox_os | * | cpe:2.3:o:nvidia:mellanox_os:*:*:*:*:*:mellanox_os:*:* |
| nvidia | onyx | * | cpe:2.3:o:nvidia:onyx:*:*:*:*:onyx_lts:*:*:* |
| nvidia | skyway | * | cpe:2.3:h:nvidia:skyway:*:*:*:*:*:skyway_lts:*:* |
| nvidia | skyway | * | cpe:2.3:h:nvidia:skyway:*:*:*:*:*:skyway:*:* |
| nvidia | metrox-3_xc | * | cpe:2.3:h:nvidia:metrox-3_xc:*:*:*:*:*:metrox:*:* |
| nvidia | metrox-2 | * | cpe:2.3:h:nvidia:metrox-2:*:*:*:*:*:metrox:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
39.9%