VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Aug 8, 2024· Updated Jun 17, 2026

CVE-2024-0104

CVE-2024-0104

Description

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected products

12
  • Nvidia/Mlnx Gw
    cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
    Range: <8.2.2000
  • Nvidia/Mlnx OS
    cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
    Range: <3.11.2002
  • Nvidia/Nvda OS Xc
    cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
    Range: <18.2.2000
  • Nvidia/ONYX3 versions
    cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*+ 2 more
    • cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*range: <3.10.4402
    • (no CPE)
    • (no CPE)range: All versions prior to and including 3.10.4302
  • Nvidia/Mellanox OSllm-fuzzy
  • Nvidia/Skywayllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: All versions prior to and including 8.2.2100
  • Nvidia/OFEDcpe-rescue
    Range: All versions prior to and including 3.11.2100
  • Nvidia/MetroX-2cpe-rescue
    Range: All versions prior to and including 3.11.1000
  • Nvidia/MetroX-3 XCCcpe-rescue
    Range: All versions prior to and including 18.2.2100

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.