VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026

CVE-2024-0113

CVE-2024-0113

Description

NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.

Affected products

14
  • Nvidia/Mlnx Gw2 versions
    cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*+ 1 more
    • cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*range: <8.2.2300
    • cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*range: <8.1.4500
  • Nvidia/Mlnx OS2 versions
    cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*+ 1 more
    • cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*range: <3.12.1002
    • cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:lts:*:*:*range: <3.10.4500
  • Nvidia/Nvda OS Xc
    cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
    Range: <18.2.2200
  • Nvidia/ONYX2 versions
    cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*+ 1 more
    • cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*range: <3.10.4504
    • (no CPE)
  • Nvidia/Mellanox OSllm-create
  • Nvidia/Skywayllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: All versions prior to and including 8.1.4400
  • Nvidia/MetroX-3 XCCllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: All versions prior to and including 18.2.2200
  • Nvidia/OFEDcpe-rescue
    Range: All versions prior to and including 3.11.2200
  • Nvidia/MetroX-2cpe-rescue
    Range: All versions prior to and including 3.11.4000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.