CVE-2024-0106 HIGH

CVE-2024-0106

Vendor Nvidia
Product BlueField 1
Weakness CWE-274
Published November 1, 2024
Last update November 1, 2024

CVSS base score

8.7/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

What the vulnerability does

01Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Key dates

02Disclosure timeline

November 1, 2024 CVE published
November 1, 2024 Record updated