CVE-2024-0113 — NVIDIA / Mellanox OS

Description (CNA)

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.

Affected (CNA)

Vendor / product	Versions
NVIDIA / Mellanox OS	affected All versions prior to and including 3.11.4000
NVIDIA / Mellanox OS	affected All versions prior to and including 3.11.2200; affected All versions prior to and including 3.10.4400
NVIDIA / Skyway	affected All versions prior to and including 8.2.2200
NVIDIA / Skyway	affected All versions prior to and including 8.1.4400
NVIDIA / MetroX-3 XC	affected All versions prior to and including 18.2.2200
NVIDIA / MetroX-2	affected All versions prior to and including 3.11.4000

CWE

CWE-35

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5563

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.