CVE-2024-0101
Estado: AnalizadaAlta (7.5)—
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.53%
- Percentil entre todas las CVEs puntuadas: 43
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-693
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-0101",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-0101",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-08-08T17:36:03.573818Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "NVIDIA",
"product": "Mellanox OS",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.1000"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "ONYX",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.10.4300"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "Skyway",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 8.2.1000"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "Skyway",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 8.1.4300"
}
],
"platforms": [
"Skyway LTS"
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "MetroX-3 XC",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 18.2.1000"
}
],
"platforms": [
"MetroX"
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "MetroX-2",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.1000"
}
],
"platforms": [
"MetroX"
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:o:nvidia:mellanox_os_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "mellanox_os_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.11.1000"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:nvidia:onyx_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "onyx_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.10.4300"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:nvidia:skyway_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "skyway_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "8.2.1000"
},
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "8.1.4300"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:nvidia:metro-3_xc_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "metro-3_xc_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "18.2.1000"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:o:nvidia:metrox-2_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "metrox-2_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.11.1000"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-08-08T17:15:17.560",
"references": [
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5559",
"tags": [
"Vendor Advisory"
],
"source": "psirt@nvidia.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"description": [
{
"lang": "en",
"value": "CWE-693"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service."
},
{
"lang": "es",
"value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 y MetroX-3 XC contienen una vulnerabilidad en ipfilter, donde definiciones incorrectas de ipfilter podrían permitir que un atacante cause una falla al atacar el conmutador. Una explotación exitosa de esta vulnerabilidad podría provocar una denegación de servicio."
}
],
"lastModified": "2026-06-17T06:52:47.120",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D34C04D4-8472-4497-8976-A1336CA1730E",
"versionEndExcluding": "3.11.2002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FBAE0EE-CEC8-47B6-80A6-7057432CB808"
},
{
"criteria": "cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CFC8AF7-0173-4C62-BCF0-47D8A14F057B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "495C879B-B556-4FF0-9B1A-5196147E8A81",
"versionEndExcluding": "8.1.4400"
},
{
"criteria": "cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "353A9872-AFB8-4242-9942-0E7C4383DD7D",
"versionEndExcluding": "8.2.2000"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "06EFCB4A-1688-4C0A-80C8-D1B50BDF5D82"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26CF254C-1556-4D77-9423-C4DD973B8CE5",
"versionEndExcluding": "3.10.4402"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD3E5FC6-48B3-4911-92EE-258F5FDE40FC",
"versionEndExcluding": "18.2.2000"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A48D107C-6629-4954-BE12-F62F6987D45D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D34C04D4-8472-4497-8976-A1336CA1730E",
"versionEndExcluding": "3.11.2002"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@nvidia.com"
}