Lucene search

K
nvd[email protected]NVD:CVE-2023-25505
HistoryApr 22, 2023 - 3:15 a.m.

CVE-2023-25505

2023-04-2203:15:10
CWE-120
web.nvd.nist.gov
5
nvidia dgx-1
ami megarac
ipmi handler
buffer overflow
denial of service
information disclosure
code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.

Affected configurations

Nvd
Node
nvidiabmcRange<3.39.30
AND
nvidiadgx-1Match-
VendorProductVersionCPE
nvidiabmc*cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*
nvidiadgx-1-cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-25505