Lucene search
NvidiaCVELIST:CVE-2023-25533HistorySep 20, 2023 - 12:54 a.m.
CVE-2023-25533
2023-09-2000:54:06
CWE-20
nvidia
www.cve.org
3
nvidia dgx h100
bmc
web ui
input validation
information disclosure
code execution
privilege escalation
vulnerability
CVSS3
8.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
61.6%
NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "DGX H100 BMC",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All versions prior to 23.08.07"
}
]
}
]Related
prion
prion
Input validation
2023-09-20 01:15:00
nvd
nvd
CVE-2023-25533
2023-09-20 01:15:54
cve
cve
CVE-2023-25533
2023-09-20 01:15:54
vulnrichment
vulnrichment
CVE-2023-25533
2023-09-20 00:54:06
nvidia
nvidia
Security Bulletin: NVIDIA DGX H100 - August 2023
2023-08-28 00:00:00
CVSS3
8.3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
61.6%
Related for CVELIST:CVE-2023-25533