Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-0113

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A succes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA Mellanox OS

Default version status: unaffected

  • All versions prior to and including 3.11.4000affected

NVIDIA Mellanox OS

Default version status: unaffected

  • All versions prior to and including 3.11.2200affected
  • All versions prior to and including 3.10.4400affected

NVIDIA Skyway

Default version status: unaffected

  • All versions prior to and including 8.2.2200affected

NVIDIA Skyway

Default version status: unaffected

  • All versions prior to and including 8.1.4400affected

NVIDIA MetroX-3 XC

Default version status: unaffected

  • All versions prior to and including 18.2.2200affected

NVIDIA MetroX-2

Default version status: unaffected

  • All versions prior to and including 3.11.4000affected

References