{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-0101", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2023-12-02T00:42:10.578Z", "datePublished": "2024-08-08T17:11:07.194Z", "dateUpdated": "2024-08-08T18:12:46.321Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Mellanox OS", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 3.11.1000"}]}, {"defaultStatus": "unaffected", "product": "ONYX", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 3.10.4300"}]}, {"defaultStatus": "unaffected", "product": "Skyway", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 8.2.1000"}]}, {"defaultStatus": "unaffected", "platforms": ["Skyway LTS"], "product": "Skyway", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 8.1.4300"}]}, {"defaultStatus": "unaffected", "platforms": ["MetroX"], "product": "MetroX-3 XC", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 18.2.1000"}]}, {"defaultStatus": "unaffected", "platforms": ["MetroX"], "product": "MetroX-2", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to and including 3.11.1000"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.</span>"}], "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Denial of service"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-693", "description": "CWE-693: Protection Mechanism Failure", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2024-08-08T17:11:07.194Z"}, "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5559"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "nvidia", "product": "mellanox_os_firmware", "cpes": ["cpe:2.3:o:nvidia:mellanox_os_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.11.1000", "versionType": "custom"}]}, {"vendor": "nvidia", "product": "onyx_firmware", "cpes": ["cpe:2.3:o:nvidia:onyx_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.10.4300", "versionType": "custom"}]}, {"vendor": "nvidia", "product": "skyway_firmware", "cpes": ["cpe:2.3:o:nvidia:skyway_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "8.2.1000", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "8.1.4300", "versionType": "custom"}]}, {"vendor": "nvidia", "product": "metro-3_xc_firmware", "cpes": ["cpe:2.3:o:nvidia:metro-3_xc_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "18.2.1000", "versionType": "custom"}]}, {"vendor": "nvidia", "product": "metrox-2_firmware", "cpes": ["cpe:2.3:o:nvidia:metrox-2_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.11.1000", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-08T17:36:03.573818Z", "id": "CVE-2024-0101", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-08T18:12:46.321Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0101", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-08T17:36:03.573818Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:nvidia:mellanox_os_firmware:*:*:*:*:*:*:*:*"], "vendor": "nvidia", "product": "mellanox_os_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.11.1000"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:nvidia:onyx_firmware:*:*:*:*:*:*:*:*"], "vendor": "nvidia", "product": "onyx_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.10.4300"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:nvidia:skyway_firmware:*:*:*:*:*:*:*:*"], "vendor": "nvidia", "product": "skyway_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "8.2.1000"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "8.1.4300"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:nvidia:metro-3_xc_firmware:*:*:*:*:*:*:*:*"], "vendor": "nvidia", "product": "metro-3_xc_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "18.2.1000"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:nvidia:metrox-2_firmware:*:*:*:*:*:*:*:*"], "vendor": "nvidia", "product": "metrox-2_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.11.1000"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-08T18:12:35.682Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Denial of service"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "Mellanox OS", "versions": [{"status": "affected", "version": "All versions prior to and including 3.11.1000"}], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "ONYX", "versions": [{"status": "affected", "version": "All versions prior to and including 3.10.4300"}], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Skyway", "versions": [{"status": "affected", "version": "All versions prior to and including 8.2.1000"}], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Skyway", "versions": [{"status": "affected", "version": "All versions prior to and including 8.1.4300"}], "platforms": ["Skyway LTS"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "MetroX-3 XC", "versions": [{"status": "affected", "version": "All versions prior to and including 18.2.1000"}], "platforms": ["MetroX"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "MetroX-2", "versions": [{"status": "affected", "version": "All versions prior to and including 3.11.1000"}], "platforms": ["MetroX"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5559"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-693", "description": "CWE-693: Protection Mechanism Failure"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2024-08-08T17:11:07.194Z"}}}, "cveMetadata": {"cveId": "CVE-2024-0101", "state": "PUBLISHED", "dateUpdated": "2024-08-08T18:12:46.321Z", "dateReserved": "2023-12-02T00:42:10.578Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2024-08-08T17:11:07.194Z", "assignerShortName": "nvidia"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*", "matchCriteriaId": "D34C04D4-8472-4497-8976-A1336CA1730E", "versionEndExcluding": "3.11.2002", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CBE1921-C790-488B-8B8B-228C4DBC2D7E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*", "matchCriteriaId": "495C879B-B556-4FF0-9B1A-5196147E8A81", "versionEndExcluding": "8.1.4400", "vulnerable": true}, {"criteria": "cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*", "matchCriteriaId": "353A9872-AFB8-4242-9942-0E7C4383DD7D", "versionEndExcluding": "8.2.2000", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*", "matchCriteriaId": "59E40D6B-8182-4448-A57C-E300F9750A7A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*", "matchCriteriaId": "26CF254C-1556-4D77-9423-C4DD973B8CE5", "versionEndExcluding": "3.10.4402", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD3E5FC6-48B3-4911-92EE-258F5FDE40FC", "versionEndExcluding": "18.2.2000", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*", "matchCriteriaId": "5440361F-B691-419C-94F1-B457873463B2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service."}, {"lang": "es", "value": "NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 y MetroX-3 XC contienen una vulnerabilidad en ipfilter, donde definiciones incorrectas de ipfilter podr\u00edan permitir que un atacante cause una falla al atacar el conmutador. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar una denegaci\u00f3n de servicio."}], "id": "CVE-2024-0101", "lastModified": "2024-09-16T19:24:31.457", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@nvidia.com", "type": "Secondary"}]}, "published": "2024-08-08T17:15:17.560", "references": [{"source": "psirt@nvidia.com", "tags": ["Vendor Advisory"], "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5559"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-693"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{}