Code injection

2024-01-2403:15:00

PRIOn knowledge base

www.prio-n.com

nvidia bluefield 2

ipmitool vulnerability

code injection

os code execution

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.9%

JSON

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.

CPENameOperatorVersion
bluefield_bmceq2.8.2-46
bluefield_bmceq23.04
bluefield_bmceq23.07
bluefield_bmceq23.09

Name	Operator	Version
bluefield_bmc	eq	2.8.2-46
bluefield_bmc	eq	23.04
bluefield_bmc	eq	23.07
bluefield_bmc	eq	23.09

References

nvidia.custhelp.com/app/answers/detail/a_id/5511