« Volver al listado

CVE-2024-0105

Estado: AplazadaAlta (8.9)—

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:A/PR:L indica red adyacente con privilegios locales (T1210). Los impactos explícitos son DoS (denial of service), data tampering (manipulación) e información limitada.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningThreat Intelligence ProgramRestrict File and Directory PermissionsPrivileged Account ManagementRemote Data StorageNetwork Segmentation

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Nvidia — Connectx FirmwareAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-0105",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-0105",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-01T14:16:56.978053Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@nvidia.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.9,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "ConnectX4",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to 12.28.2302"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "ConnectX4 LX",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.32.1900"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "ConnectX GA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.41.1000"
            }
          ],
          "platforms": [
            "ConnectX 6",
            "ConnectX 6 DX",
            "ConnectX 6 LX",
            "ConnectX 7"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "ConnectX LTS22",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.35.4030"
            }
          ],
          "platforms": [
            "ConnectX 5",
            "ConnectX 6",
            "ConnectX 6 DX",
            "ConnectX 6 LX",
            "ConnectX 7"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "ConnectX LTS23",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.39.3560"
            }
          ],
          "platforms": [
            "ConnectX 6",
            "ConnectX 6 DX",
            "ConnectX 6 LX",
            "ConnectX 7"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "BlueField 1",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to 18.31.1014"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "BlueField GA",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.41.1000"
            }
          ],
          "platforms": [
            "BlueField 2",
            "BlueField 3"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "BlueField LTS22",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.35.4030"
            }
          ],
          "platforms": [
            "BlueField 2"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "NVIDIA",
          "product": "BlueField LTS23",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to xx.39.3560"
            }
          ],
          "platforms": [
            "BlueField 2",
            "BlueField 3"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-11-01T06:15:12.397",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5562",
      "source": "psirt@nvidia.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@nvidia.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-274"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure."
    },
    {
      "lang": "es",
      "value": " El firmware de NVIDIA ConnectX contiene una vulnerabilidad que permite a un atacante gestionar de forma incorrecta un problema de falta de privilegios. Si se explota esta vulnerabilidad con éxito, se puede producir una denegación de servicio, manipulación de datos y divulgación limitada de información."
    }
  ],
  "lastModified": "2026-06-17T06:52:47.600",
  "sourceIdentifier": "psirt@nvidia.com"
}