8.9

CVE-2024-0105

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNVIDIA
≫
Produkt ConnectX4
Default Statusunaffected
Version All versions prior to 12.28.2302
Status affected
HerstellerNVIDIA
≫
Produkt ConnectX4 LX
Default Statusunaffected
Version All versions prior to xx.32.1900
Status affected
HerstellerNVIDIA
≫
Produkt ConnectX GA
Default Statusunaffected
Version All versions prior to xx.41.1000
Status affected
HerstellerNVIDIA
≫
Produkt ConnectX LTS22
Default Statusunaffected
Version All versions prior to xx.35.4030
Status affected
HerstellerNVIDIA
≫
Produkt ConnectX LTS23
Default Statusunaffected
Version All versions prior to xx.39.3560
Status affected
HerstellerNVIDIA
≫
Produkt BlueField 1
Default Statusunaffected
Version All versions prior to 18.31.1014
Status affected
HerstellerNVIDIA
≫
Produkt BlueField GA
Default Statusunaffected
Version All versions prior to xx.41.1000
Status affected
HerstellerNVIDIA
≫
Produkt BlueField LTS22
Default Statusunaffected
Version All versions prior to xx.35.4030
Status affected
HerstellerNVIDIA
≫
Produkt BlueField LTS23
Default Statusunaffected
Version All versions prior to xx.39.3560
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.156
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@nvidia.com 8.9 2.3 6
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
CWE-274 Improper Handling of Insufficient Privileges

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.