CVE-2024-0104: NVIDIA Mlnx-Gw

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected products

• NVIDIA Mlnx-Gw: before 8.2.2000 (fixed in 8.2.2000)
• NVIDIA Mlnx-OS: before 3.11.2002 (fixed in 3.11.2002); before 3.11.2202 (fixed in 3.11.2202)
• NVIDIA Nvda-OS Xc: before 18.2.2000 (fixed in 18.2.2000)
• NVIDIA Onyx: before 3.10.4402 (fixed in 3.10.4402)

Published 2024-08-08. Last modified 2026-06-17.