CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
20.0%
NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.
Vendor | Product | Version | CPE |
---|---|---|---|
nvidia | mlnx-os | * | cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:* |
nvidia | mlnx-os | * | cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:lts:*:*:* |
nvidia | metrox-2 | - | cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:* |
nvidia | mlnx-gw | * | cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:* |
nvidia | skyway | - | cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:* |
nvidia | onyx | * | cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:* |
nvidia | nvda-os_xc | * | cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:* |
nvidia | metrox-3_xc | - | cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:* |
[
{
"defaultStatus": "unaffected",
"platforms": [
"Mellanox OS LTS"
],
"product": "Mellanox OS",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.2100"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ONYX",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.10.4302"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Skyway"
],
"product": "Skyway",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 8.2.2100"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"MetroX"
],
"product": "MetroX-3 XC",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 18.2.2100"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"MetroX"
],
"product": "MetroX-2",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to and including 3.11.1000"
}
]
}
]