CVE-2024-0105

State: Published
Severity: 8.9 High
Published: Nov 1, 2024
Updated: Nov 1, 2024
Reserved: Dec 2, 2023

Description

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Scores

CVSS	Score	Vector	Source
3.1	8.9 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H	nvidia

Weaknesses

CWE-274

Affected Products

Product	Versions
ConnectX4NVIDIA	All versions prior to 12.28.2302Affected
ConnectX4 LXNVIDIA	All versions prior to xx.32.1900Affected
ConnectX GANVIDIA	All versions prior to xx.41.1000Affected
ConnectX LTS22NVIDIA	All versions prior to xx.35.4030Affected
ConnectX LTS23NVIDIA	All versions prior to xx.39.3560Affected
BlueField 1NVIDIA	All versions prior to 18.31.1014Affected
BlueField GANVIDIA	All versions prior to xx.41.1000Affected
BlueField LTS22NVIDIA	All versions prior to xx.35.4030Affected
BlueField LTS23NVIDIA	All versions prior to xx.39.3560Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5562

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.