NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper authentication issue by sending a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UFM Enterprise GA
Vendor
NVIDIA
Product
UFM Enterprise GA
Platforms
RHEL 8
RHEL 9
Ubuntu20
Ubuntu22
Default status
affected
UFM Enterprise GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.15.x, 6.16.x, 6.17.x
affected
Unavailable
Unavailable
Unavailable
None listed
UFM Enterprise LTS23
Vendor
NVIDIA
Product
UFM Enterprise LTS23
Platforms
RHEL 7
RHEL 8
RHEL 9
Ubuntu18
Ubuntu20
Ubuntu22
Default status
affected
UFM Enterprise LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.15.x LTS prior to 6.15.6-4 LTS
affected
Unavailable
Unavailable
Unavailable
None listed
UFM Enterprise Appliance GA
Vendor
NVIDIA
Product
UFM Enterprise Appliance GA
Platforms
Unknown
Default status
affected
UFM Enterprise Appliance GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.6.x, 1.7.x, 1.8.x
affected
Unavailable
Unavailable
Unavailable
None listed
UFM Enterprise Appliance LTS23
Vendor
NVIDIA
Product
UFM Enterprise Appliance LTS23
Platforms
Unknown
Default status
affected
UFM Enterprise Appliance LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.6.x LTS prior to 1.6.6-1 LTS
affected
Unavailable
Unavailable
Unavailable
None listed
UFM SDN Appliance GA
Vendor
NVIDIA
Product
UFM SDN Appliance GA
Platforms
Unknown
Default status
affected
UFM SDN Appliance GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.14.x, 4.15.x, 4.16.x
affected
Unavailable
Unavailable
Unavailable
None listed
UFM SDN Appliance LTS23
Vendor
NVIDIA
Product
UFM SDN Appliance LTS23
Platforms
Unknown
Default status
affected
UFM SDN Appliance LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.14.x LTS prior to 4.14.6.4 LTS
affected
Unavailable
Unavailable
Unavailable
None listed
UFM CyberAI GA
Vendor
NVIDIA
Product
UFM CyberAI GA
Platforms
Unknown
Default status
affected
UFM CyberAI GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.6.x, 2.7.x, 2.8.x
affected
Unavailable
Unavailable
Unavailable
None listed
UFM CyberAI LTS23
Vendor
NVIDIA
Product
UFM CyberAI LTS23
Platforms
Unknown
Default status
affected
UFM CyberAI LTS23 · Scoped product and version facts