Lucene search
+L

2027 matches found

Positive Technologies
Positive Technologies
added 2023/05/10 12:00 a.m.9 views

PT-2023-20152 · Intel · Intel Server Board Bmc Firmware

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: The issue is related to improper buffer restrictions in the firmware, which may allow a privileged user to escalate privileges via local access. Recommendations: For version...

8.2CVSS6.5AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/10 12:00 a.m.7 views

PT-2023-18610 · Intel · Intel Server Board Bmc Firmware

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: A buffer overflow issue may allow a privileged user to enable escalation of privilege via local access. Recommendations: For versions prior to 2.90, update to version 2.90 o...

8.2CVSS7.9AI score0.00205EPSS
SaveExploits0References2
Intel
Intel
added 2023/05/09 12:00 a.m.44 views

Intel® Server Board BMC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Board Baseboard Management Controller BMC firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability...

8.2CVSS7.1AI score0.00207EPSS
SaveExploits0
OSV
OSV
added 2023/04/22 3:15 a.m.7 views

CVE-2023-25505

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

7.8CVSS7.5AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/22 3:15 a.m.31 views

CVE-2023-25508

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tamperi...

7.8CVSS7AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/22 3:15 a.m.32 views

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS7.5AI score0.00861EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/22 3:15 a.m.7 views

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS7.5AI score0.00861EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/22 3:15 a.m.23 views

Design/Logic Flaw

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

6.5CVSS8.6AI score0.00861EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/22 3:15 a.m.24 views

Design/Logic Flaw

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tamperi...

4.3CVSS8AI score0.00237EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/22 3:15 a.m.25 views

Buffer overflow

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

4.3CVSS8.1AI score0.00213EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/22 2:32 a.m.12 views

CVE-2023-25508

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tamperi...

6.7CVSS7.2AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/22 2:32 a.m.37 views

CVE-2023-25508

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tamperi...

6.7CVSS8.3AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/22 2:32 a.m.66 views

CVE-2023-25508

NVIDIA DGX-1 BMC IPMI handler vulnerability (CVE-2023-25508) allows an attacker with the appropriate authorization level to upload/download arbitrary files under certain circumstances, potentially causing denial of service, privilege escalation, information disclosure, and data tampering. The iss...

7.8CVSS8AI score0.00237EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/22 2:31 a.m.74 views

CVE-2023-25507

The CVE-2023-25507 issue affects NVIDIA DGX-1 BMC SPX REST API. A privileged, authenticated attacker can inject arbitrary shell commands via the REST API, potentially enabling code execution, denial of service, information disclosure, or data tampering. Public sources corroborate affecting DGX-1 ...

8.8CVSS8.6AI score0.00861EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/22 2:31 a.m.10 views

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

7.2CVSS7.1AI score0.00861EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/22 2:31 a.m.42 views

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

7.2CVSS8.9AI score0.00861EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/22 2:29 a.m.71 views

CVE-2023-25505

CVE-2023-25505 affects NVIDIA DGX-1 BMC, specifically the IPMI handler in the AMI MegaRAC BMC. The issue is a buffer overflow that an attacker with the appropriate authorization level can trigger, potentially causing denial of service, information disclosure, or arbitrary code execution. NVIDIA's...

7.8CVSS8.2AI score0.00213EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/22 2:29 a.m.8 views

CVE-2023-25505

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

7.8CVSS8AI score0.00213EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/22 2:29 a.m.38 views

CVE-2023-25505

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

7.8CVSS8.5AI score0.00213EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/04/22 12:00 a.m.13 views

PT-2023-8260 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a stack overflow vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC. An unauthenticated attacker can exploit this by sending a specially...

9.8CVSS9.9AI score0.00603EPSS
SaveExploits0References7
Rows per page
Query Builder