Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-0130
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper authentication issue by sending a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
NVIDIA UFM 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NVIDIA UFM是美国英伟达（NVIDIA）公司的一个强大的平台，用于管理 InfiniBand 横向扩展计算环境。 NVIDIA UFM存在授权问题漏洞，该漏洞源于通过以太网管理接口发送畸形请求导致的身份验证不当，可能会导致权限提升、数据篡改、拒绝服务和信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
NVIDIAUFM Enterprise GA 6.15.x, 6.16.x, 6.17.x -
NVIDIAUFM Enterprise LTS23 6.15.x LTS prior to 6.15.6-4 LTS -
NVIDIAUFM Enterprise Appliance GA 1.6.x, 1.7.x, 1.8.x -
NVIDIAUFM Enterprise Appliance LTS23 1.6.x LTS prior to 1.6.6-1 LTS -
NVIDIAUFM SDN Appliance GA 4.14.x, 4.15.x, 4.16.x -
NVIDIAUFM SDN Appliance LTS23 4.14.x LTS prior to 4.14.6.4 LTS -
NVIDIAUFM CyberAI GA 2.6.x, 2.7.x, 2.8.x -
NVIDIAUFM CyberAI LTS23 2.6.1-3 LTS -
II. Public POCs for CVE-2024-0130
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2024-0130
Please Login to view more intelligence information
New Vulnerabilities
Vendor: NVIDIA
Same weakness: CWE-287
V. Comments for CVE-2024-0130

No comments yet

Leave a comment