ONYX vulnerabilities

3 known vulnerabilities in ONYX from NVIDIA. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Mellanox OS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-0113Aug 12, 2024NVIDIAEPSS 1.09%

  NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and in

• 8.8 High severity

  Mellanox OS: Improper Access Control

  CVE-2024-0104Aug 8, 2024NVIDIA

  NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalatio

• 7.5 High severity

  Mellanox OS: Protection Mechanism Failure

  CVE-2024-0101Aug 8, 2024NVIDIA

  NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to de