CVE-2024-0105 HIGH

CVE-2024-0105

Vendor Nvidia
Product ConnectX4
Weakness CWE-274
Published November 1, 2024
Last update November 1, 2024

CVSS base score

8.9/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

What the vulnerability does

01Description

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Key dates

02Disclosure timeline

November 1, 2024 CVE published
November 1, 2024 Record updated