NVIDIA Mlnx-OS vulnerabilities

3 CVEs affecting NVIDIA Mlnx-OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0113, published 2024-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0113, published 2024-08-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of…
CVE-2024-0101, published 2024-08-08. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the…
CVE-2024-0104, published 2024-08-08. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might…