high7.5
CVE-2024-0113
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially …
Impact
NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Mlnx-Os | before 3.10.4500 before 3.12.1002 from 3.11.0000 before 3.11.2302 |
| Nvidia | Onyx | before 3.10.4504 |
| Nvidia | Mlnx-Gw | before 8.1.4500 before 8.2.2300 |
| Nvidia | Nvda-Os Xc | before 18.2.2200 |