CVE-2023-31009

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2023-31009

CVE-2023-31009 affects NVIDIA DGX H100 BMC, where the REST service is vulnerable to improper input validation. The core issue enables possible code execution, denial of service, privilege escalation, and information disclosure. Root cause is input validation failures in the REST interface of the ...

CVE-2023-31009

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2023-31008

CVE-2023-31008 (NVIDIA DGX H100 BMC IPMI input validation) is a vulnerability in the BMC IPMI stack of NVIDIA DGX H100 systems. The Red Hat/NVD entries and NVIDIA security bulletin describe improper input validation in IPMI as the root cause, enabling an attacker with local access to potentially ...

CVE-2023-31008

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure...

CVE-2023-31008

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure...

CVE-2023-25534

Summary: CVE-2023-25534 affects the NVIDIA DGX H100 BMC via an IPMI input-validation vulnerability. The Red Hat and NVIDIA advisories describe an improper input validation flaw in IPMI that could enable an attacker to achieve code execution, denial of service, privilege escalation, information di...

CVE-2023-25534

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2023-25533

NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges...

CVE-2023-25533

Summary: CVE-2023-25533 affects NVIDIA DGX H100 BMC web UI, with an input-validation flaw that may allow an attacker to obtain information, execute code, and escalate privileges. The issue is corroborated by multiple sources (NVD entry, Red Hat advisory, NVIDIA Security Bulletin) and is listed wi...

CVE-2023-25532

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2023-25532

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2023-25532

CVE-2023-25532 affects the NVIDIA DGX H100 BMC via the IPMI component. The root cause is a vulnerability in IPMI that may lead to insufficient protection of credentials, enabling information disclosure. The NVIDIA security bulletin lists this CVE among firmware issues and specifies a remediation:...

CVE-2023-25531

CVE-2023-25531 affects NVIDIA DGX H100 BMC IPMI, where insufficient protection of credentials could allow unauthenticated remote-style impact via IPMI components. The vulnerability may enable code execution, denial of service, information disclosure, and privilege escalation per NVIDIA security b...

CVE-2023-25531

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges...

CVE-2023-25531

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges...

CVE-2023-25530

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2023-25530

The CVE-2023-25530 issue affects NVIDIA DGX H100 BMC: the KVM service suffers from improper input validation, potentially enabling code execution, denial of service, privilege escalation, and information disclosure. Affected firmware is all DGX H100 BMC versions prior to 23.08.18; NVIDIA’s adviso...

CVE-2023-25530

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure...

CVE-2023-25529

The CVE-2023-25529 vulnerability affects NVIDIA DGX H100 BMC and DGX A100 BMC, in the host KVM daemon, allowing an unauthenticated attacker to observe timing differences and leak another user’s session token. Reported impact includes information disclosure, privilege escalation, and data tamperin...