Lucene search
NvidiaCVELIST:CVE-2023-31037HistoryJan 24, 2024 - 2:12 a.m.
CVE-2023-31037
2024-01-2402:12:30
CWE-94
nvidia
www.cve.org
nvidia
bluefield
dpu
bmc
ipmitool
code injection
vulnerability
network call
code execution
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
22.9%
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Bluefield 2 DPU BMC, BlueField 3 DPU BMC",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "LTS:2.8.2-46, 23.04, 23.07, 23.09"
}
]
}
]Related
nvidia
nvidia
Security Bulletin: NVIDIA BlueField 2 and 3 BMC - January 2024
2024-01-22 00:00:00
cve
cve
CVE-2023-31037
2024-01-24 03:15:08
prion
prion
Code injection
2024-01-24 03:15:00
nvd
nvd
CVE-2023-31037
2024-01-24 03:15:08
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
22.9%
Related for CVELIST:CVE-2023-31037