Record status Published
Identifier year (not publication year) 2024
Source publication Aug 9, 2024
Source updated Aug 13, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Mellanox OS
Vendor NVIDIA
Product Mellanox OS
Default status unaffected
Mellanox OS · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 3.11.4000 affectedUnavailable Unavailable Unavailable None listed
Mellanox OS
Vendor NVIDIA
Product Mellanox OS
Default status unaffected
Mellanox OS · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 3.11.2200 affectedUnavailable Unavailable Unavailable None listed All versions prior to and including 3.10.4400 affectedUnavailable Unavailable Unavailable None listed
Skyway
Vendor NVIDIA
Product Skyway
Default status unaffected
Skyway · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 8.2.2200 affectedUnavailable Unavailable Unavailable None listed
Skyway
Vendor NVIDIA
Product Skyway
Default status unaffected
Skyway · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 8.1.4400 affectedUnavailable Unavailable Unavailable None listed
MetroX-3 XC
Vendor NVIDIA
Product MetroX-3 XC
Default status unaffected
MetroX-3 XC · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 18.2.2200 affectedUnavailable Unavailable Unavailable None listed
MetroX-2
Vendor NVIDIA
Product MetroX-2
Default status unaffected
MetroX-2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions prior to and including 3.11.4000 affectedUnavailable Unavailable Unavailable None listed