The vulnerability of the Host KVM Daemon on the BMC – Baseboard Management Controller of the NVIDIA DGX A100 server allows a attacker to gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the NVIDIA DGX A100 server’s Host KVM Daemon, a device management controller, lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to read, modify, or delete data, execute arbitrary...

CVE-2023-37297

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-3043

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

PT-2024-12474 · Ami · Ami'S Spx

Name of the Vulnerable Software and Affected Versions: AMI's SPx affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI's SPx, where an attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this issu...

CVE-2023-33412

The web interface in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targetin...

Intel One Boot Flash Utility Security Vulnerability

The Intel One Boot Flash Utility is an Intel Corporation program for updating a system's BIOS, BMC, Sensor Data Recording SDR, Field-Replaceable Unit FRU, and Intel® Management Engine Intel® ME. Programs for the Intel® Management Engine Intel® ME. A security vulnerability exists in the Intel One...

The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers involves insufficient protection of the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...

The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers is related to insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary code.

The vulnerability of the web interface of the BMC IPMI server from Supermicro’s X11 series is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the web interface of BMC IPMI Supermicro X11 servers exists due to the lack of protective measures for the web page structure. This allows attackers to execute XSS attacks.

The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...

The vulnerability in the web interface of Supermicro X112 series BMC IPMI servers relates to the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...

The vulnerability in the web interface of BMC IPMI Supermicro X11 servers relates to the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Host KVM Daemon of the BMC – the Baseboard Management Controller – in NVIDIA DGX H100 BMC allows a hacker to execute arbitrary code, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA DGX H100 BMC’s KVM daemon controller for equipment management involves an escape from the buffer boundaries into memory. Exploiting this vulnerability allows a attacker to execute arbitrary code, cause system failures, or gain increased privileges...

CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

NVIDIA DGX License Issue Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX H100 BMC that stems from an incorrect authentication issue...

NVIDIA DGX Input Validation Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX H100 BMC that stems from incorrect input validation...

NVIDIA DGX Input Validation Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX H100 BMC that stems from incorrect input validation...

NVIDIA DGX Input Validation Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX H100 BMC that stems from incorrect input validation...

PT-2023-20138 · Nvidia · Nvidia Dgx A100

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 baseboard management controller BMC affected versions not specified Description: The NVIDIA DGX H100 baseboard management controller BMC contains a vulnerability in a web server plugin. An unauthenticated attacker may cause a...

Intel Server Board Code Issue Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in IntelR Server Board M10JNP2SB integrated BMC video drivers versions prior to 3.0. An attacker can exploit the vulnerability to elevate privileges...

HPESBHF04485 rev.1 - HPE Cloudline CL4150 Using AMI MegaRac BMC Firmware, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Escalation of Privilege, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL4150 Gen10 Server - Prior to v3.09.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...