« Volver al listado

CVE-2024-0104

Estado: AnalizadaAlta (8.8)—

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Nvidia — Mlnx-gwNvidia — Mlnx-osNvidia — Nvda-os XCNvidia — Onyx

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-0104",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-0104",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-08T17:35:12.411213Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.2,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 1.6
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "Mellanox OS",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 3.11.2100"
            }
          ],
          "platforms": [
            "Mellanox OS LTS"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "ONYX",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 3.10.4302"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "Skyway",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 8.2.2100"
            }
          ],
          "platforms": [
            "Skyway"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "MetroX-3 XC",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 18.2.2100"
            }
          ],
          "platforms": [
            "MetroX"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "MetroX-2",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to and including 3.11.1000"
            }
          ],
          "platforms": [
            "MetroX"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-08-08T18:15:09.800",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5559",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@nvidia.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges."
    },
    {
      "lang": "es",
      "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 y MetroX-3 XC contienen una vulnerabilidad en el componente LDAP AAA, donde un usuario puede provocar un acceso inadecuado. Una explotación exitosa de esta vulnerabilidad podría conducir a la divulgación de información, la manipulación de datos y la escalada de privilegios."
    }
  ],
  "lastModified": "2026-06-17T06:52:47.483",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26CF254C-1556-4D77-9423-C4DD973B8CE5",
              "versionEndExcluding": "3.10.4402"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D34C04D4-8472-4497-8976-A1336CA1730E",
              "versionEndExcluding": "3.11.2002"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6FBAE0EE-CEC8-47B6-80A6-7057432CB808"
            },
            {
              "criteria": "cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CFC8AF7-0173-4C62-BCF0-47D8A14F057B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "353A9872-AFB8-4242-9942-0E7C4383DD7D",
              "versionEndExcluding": "8.2.2000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "06EFCB4A-1688-4C0A-80C8-D1B50BDF5D82"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD3E5FC6-48B3-4911-92EE-258F5FDE40FC",
              "versionEndExcluding": "18.2.2000"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A48D107C-6629-4954-BE12-F62F6987D45D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8748C387-D070-4E5D-931D-5EEE92E793F4",
              "versionEndExcluding": "3.11.2202"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}