CVE-2024-0101: NVIDIA Mlnx-Gw

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.

Affected products

• NVIDIA Mlnx-Gw: before 8.1.4400 (fixed in 8.1.4400); before 8.2.2000 (fixed in 8.2.2000)
• NVIDIA Mlnx-OS: before 3.11.2002 (fixed in 3.11.2002)
• NVIDIA Nvda-OS Xc: before 18.2.2000 (fixed in 18.2.2000)
• NVIDIA Onyx: before 3.10.4402 (fixed in 3.10.4402)

Published 2024-08-08. Last modified 2026-06-17.