Description
NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | ConnectX GA | All versions prior to 45.1020 | — |
| NVIDIA | ConnectX LTS22 | All versions prior to 35.4554 | — |
| NVIDIA | ConnectX LTS23 | All versions prior to 39.5050 | — |
| NVIDIA | ConnectX LTS24 | All versions prior to 43.3608 | — |
| NVIDIA | ConnectX-4 | All versions prior to 12.28.2704 | — |
| NVIDIA | ConnectX-4 LX | All versions prior to 14.32.1908 | — |