How severe is CVE-2024-0106?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.7 out of 10.

What type of vulnerability is CVE-2024-0106?

This is classified as CWE-274, which is a common weakness in software security.

CVE-2024-0106 - HIGH Severity | CVSS 8.7

Vulnerability Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Related Vulnerabilities

CVE-2020-7283

HIGH

CVSS:8.8(High)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not ha...

CWE-2742020

CVE-2023-35928

HIGH

CVSS:8.8(High)

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server...

CWE-2742023

CVE-2024-21648

HIGH

CVSS:8.8(High)

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of...

CWE-2742024

CVE-2024-0105

HIGH

CVSS:8.9(High)

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of se...

CWE-2742024

CVE-2020-7264

HIGH

CVSS:8.4(High)

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipu...

CWE-2742020

CVE-2020-7265

HIGH

CVSS:8.4(High)

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic li...

CWE-2742020