{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Mellanox OS"],"product":"Mellanox OS","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.11.4000"}]},{"defaultStatus":"unaffected","platforms":["Mellanox OS LTS"],"product":"Mellanox OS","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.11.2200"},{"status":"affected","version":"All versions prior to and including 3.10.4400"}]},{"defaultStatus":"unaffected","platforms":["Skyway"],"product":"Skyway","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 8.2.2200"}]},{"defaultStatus":"unaffected","platforms":["Skyway LTS"],"product":"Skyway","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 8.1.4400"}]},{"defaultStatus":"unaffected","platforms":["MetroX"],"product":"MetroX-3 XC","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 18.2.2200"}]},{"defaultStatus":"unaffected","platforms":["MetroX"],"product":"MetroX-2","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions prior to and including 3.11.4000"}]}],"source":"psirt@nvidia.com"},{"affectedData":[{"cpes":["cpe:2.3:o:nvidia:mellanox_os_firmware:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"mellanox_os_firmware","vendor":"nvidia","versions":[{"lessThanOrEqual":"3.11.4000","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"3.11.2200","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"3.10.4400","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:nvidia:skyway_firmware:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"skyway_firmware","vendor":"nvidia","versions":[{"lessThanOrEqual":"8.2.2200","status":"affected","version":"0","versionType":"custom"},{"lessThanOrEqual":"8.1.4400","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:nvidia:metrox-2_firmware:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"metrox-2_firmware","vendor":"nvidia","versions":[{"lessThanOrEqual":"3.11.4000","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:nvidia:metrox-3_xc_firmware:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"metrox-3_xc_firmware","vendor":"nvidia","versions":[{"lessThanOrEqual":"18.2.2200","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:lts:*:*:*","matchCriteriaId":"A4E85C90-C504-4F1C-B147-9246C5F45A52","versionEndExcluding":"3.10.4500","vulnerable":true},{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*","matchCriteriaId":"CF3DBA9B-E254-4720-80DE-BAE1E6C87D39","versionEndExcluding":"3.12.1002","vulnerable":true},{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:lts:*:*:*","matchCriteriaId":"77AA870D-4162-4F51-B792-D1963E57D18F","versionEndExcluding":"3.11.2302","versionStartIncluding":"3.11.0000","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*","matchCriteriaId":"ACA84659-5961-46E4-9307-1A6CAA6EF315","versionEndExcluding":"3.10.4504","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*","matchCriteriaId":"6D5BCB2C-535F-444A-BC92-35724A806A7A","versionEndExcluding":"8.1.4500","vulnerable":true},{"criteria":"cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*","matchCriteriaId":"50063E3A-0932-4BF5-8461-6985BD624328","versionEndExcluding":"8.2.2300","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*","matchCriteriaId":"06EFCB4A-1688-4C0A-80C8-D1B50BDF5D82","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*","matchCriteriaId":"3503FC22-FDB7-4588-8451-3F601F1C4F88","versionEndExcluding":"18.2.2200","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*","matchCriteriaId":"A48D107C-6629-4954-BE12-F62F6987D45D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*","matchCriteriaId":"CF3DBA9B-E254-4720-80DE-BAE1E6C87D39","versionEndExcluding":"3.12.1002","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*","matchCriteriaId":"6FBAE0EE-CEC8-47B6-80A6-7057432CB808","vulnerable":false},{"criteria":"cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*","matchCriteriaId":"2CFC8AF7-0173-4C62-BCF0-47D8A14F057B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure."},{"lang":"es","value":"NVIDIA Mellanox OS, ONYX, Skyway y MetroX-3 XCC contienen una vulnerabilidad en el soporte web, donde un atacante puede provocar que una ruta CGI atraviese una URI especialmente manipulada. Una explotación exitosa de esta vulnerabilidad podría conducir a una escalada de privilegios y divulgación de información."}],"id":"CVE-2024-0113","lastModified":"2026-06-17T06:52:48.530","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"psirt@nvidia.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0113","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-13T14:10:20.123699Z","version":"2.0.3"}}]},"published":"2024-08-12T13:38:12.693","references":[{"source":"psirt@nvidia.com","tags":["Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5563"}],"sourceIdentifier":"psirt@nvidia.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-35"}],"source":"psirt@nvidia.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-22"}],"source":"nvd@nist.gov","type":"Primary"}]}