NVIDIA UFM Enterprise Vulnerability Could Lead to Escalation of Privileges and Data Tampering

CVE-2024-0130

8.8HIGH

Key Information

Vendor
Nvidia
Status
Ufm Enterprise Ga
Ufm Enterprise Lts23
Ufm Enterprise Appliance Ga
Ufm Enterprise Appliance Lts23
Vendor
CVE Published:
6 December 2024

Badges

đź“° News Worthy

Summary

NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper authentication issue by sending a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.

Affected Version(s)

UFM Enterprise GA <= 6.15.x, 6.16.x, 6.17.x

UFM Enterprise LTS23 <= 6.15.x LTS prior to 6.15.6-4 LTS

UFM Enterprise Appliance GA <= 1.6.x, 1.7.x, 1.8.x

News Articles

favicon imageTheCyberThrone

Nvidia fixed CVE-2024-0130 in UFM Enterprise

NVIDIA has patched a high-severity vulnerability affecting its UFM Enterprise, UFM Appliance, and UFM CyberAI products. could allow an attacker to gain escalated privileges, tamper with data, deny service, and disclose sensitive information. The vulnerability, identified as CVE-2024-0130 with a CVSS...

3 weeks ago

Refferences

https://nvidia.custhelp.com/app/answers/detail/a_id/5584

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • First article discovered by TheCyberThrone

Collectors

NVD DatabaseMitre Database1 News Article(s)
.