CVE-2024-0104 — NVIDIA / Mellanox OS

Description (CNA)

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected (CNA)

Vendor / product	Versions
NVIDIA / Mellanox OS	affected All versions prior to and including 3.11.2100
NVIDIA / ONYX	affected All versions prior to and including 3.10.4302
NVIDIA / Skyway	affected All versions prior to and including 8.2.2100
NVIDIA / MetroX-3 XC	affected All versions prior to and including 18.2.2100
NVIDIA / MetroX-2	affected All versions prior to and including 3.11.1000

CWE

CWE-284

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5559

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.