Mellanox OS / MetroX / Onyx / Skyway: Improper access control on switch mgmt

CVSS 4.2CVE-2024-0104NVIDIA / GPU stackcurated

Impact

Improper access control on switch mgmt

Who can reach it

Authenticated switch user

What to do

Upgrade switch OS image

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0104 https://github.com/NVIDIA/product-security/tree/main/2024/5559

Related entries

Mellanox OS / MetroX / Onyx / Skyway: Switch/gateway DoS (improper input validation)CVE-2024-0101 · Mellanox OS / MetroX / Onyx / SkywayHigh
CUDA Toolkit: Code exec potential (buffer overflow)CVE-2025-23275 · CUDA ToolkitMedium
NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOS: A VBIOS misconfiguration lets an attacker set an unsafe GPU debugCVE-2025-23301 · NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOSMedium
NVIDIA HGX / DGX (Hopper and Blackwell) - NVSwitch LS10 firmware: A misconfiguration of the LS10 NVSwitch lets anCVE-2025-23302 · NVIDIA HGX / DGX (Hopper and Blackwell) - NVSwitch LS10 firmwareMedium
NVIDIA GPU firmware microcontroller (Falcon): Debug mechanisms in the GPU's internal microcontroller are reachable withCVE-2021-1088 · NVIDIA GPU firmware microcontroller (Falcon)Medium
NVIDIA GPU firmware microcontroller (Falcon): Debug registers on the GPU's internal microcontroller are readable atCVE-2021-1105 · NVIDIA GPU firmware microcontroller (Falcon)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.