CVE-2024-0105

🗓️ 01 Nov 2024 05:36:06Reported by nvidiaType

NVIDIA ConnectX Firmware vulnerability, improper handling of privilege

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of NVIDIA ConnectX network cards’ microprogramming software and NVIDIA BlueField data processing processor microprogramming software, related to access control deficiencies, allows attackers to gain unauthorized access to read and modify data, or cause service failures.	6 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-0105	1 Nov 202407:59	–	circl
CNNVD	NVIDIA ConnectX和NVIDIA BlueField 安全漏洞	1 Nov 202400:00	–	cnnvd
CNVD	NVIDIA ConnectX Privilege Issue Vulnerability	7 Nov 202400:00	–	cnvd
CheckPoint Security	Check Point Response to CVE-2024-0105 and CVE-2024-0106 - NVIDIA Firmware Vulnerabilities	25 Nov 202400:00	–	checkpoint_security
CVE	CVE-2024-0105	1 Nov 202405:36	–	cve
EUVD	EUVD-2024-15906	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0105	1 Nov 202406:15	–	nvd
Nvidia	Security Bulletin: NVIDIA ConnectX and BlueField - October 2024	29 Oct 202400:00	–	nvidia
Positive Technologies	PT-2023-9634 · Nvidia · Nvidia Bluefield +1	2 Dec 202300:00	–	ptsecurity

[
  {
    "defaultStatus": "unaffected",
    "product": "ConnectX4",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 12.28.2302"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ConnectX4 LX",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.32.1900"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "ConnectX 6",
      "ConnectX 6 DX",
      "ConnectX 6 LX",
      "ConnectX 7"
    ],
    "product": "ConnectX GA",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.41.1000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "ConnectX 5",
      "ConnectX 6",
      "ConnectX 6 DX",
      "ConnectX 6 LX",
      "ConnectX 7"
    ],
    "product": "ConnectX LTS22",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.35.4030"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "ConnectX 6",
      "ConnectX 6 DX",
      "ConnectX 6 LX",
      "ConnectX 7"
    ],
    "product": "ConnectX LTS23",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.39.3560"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BlueField 1",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 18.31.1014"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "BlueField 2",
      "BlueField 3"
    ],
    "product": "BlueField GA",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.41.1000"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "BlueField 2"
    ],
    "product": "BlueField LTS22",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.35.4030"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "BlueField 2",
      "BlueField 3"
    ],
    "product": "BlueField LTS23",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to xx.39.3560"
      }
    ]
  }
]

Source	Link
nvidia	www.nvidia.custhelp.com/app/answers/detail/a_id/5562

01 Nov 2024 05:36Current

CVSS 3.18.9

EPSS0.00271

CWE-274