PT-2023-20142 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The issue is related to insufficient protection of credentials in IPMI, which could lead to code execution, denial of service, information disclosure, and escalation of...

PT-2023-23107 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead ...

NVIDIA DGX Security Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX H100 BMC, which stems from a security flaw in IPMI that can be exploited by an attacker to cause an information leak...

PT-2023-23110 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead t...

PT-2023-23106 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The issue is related to improper input validation in IPMI, which can be exploited by an attacker to achieve code execution, denial of services, escalation of privileges, and...

PT-2023-20145 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The issue is related to improper input validation in IPMI, which can be exploited by an attacker to cause code execution, denial of service, escalation of privileges, informatio...

PT-2023-23111 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead ...

9 Alarming Vulnerabilities Uncovered in SEL's Power Management Products

Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories SEL. "The most severe of those nine vulnerabilities would allow a threat actor to facilitate remote code execution RCE on an engineering workstation," Nozomi Networks said in ...

CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

Privilege escalation

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

Authentication flaw

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host...

PT-2023-11794 · Bmc · Bmc Patrol Agent

Name of the Vulnerable Software and Affected Versions: BMC PATROL Agent versions prior to 20.08.00 Description: The issue allows local privilege escalation via vectors involving pconfig and the +RESTART -host options. Recommendations: For versions prior to 20.08.00, update to version 20.08.00 or...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

CVE-2020-35593

Vulnerability summary (CVE-2020-35593) : BMC PATROL Agent (versions prior to 20.08.00) is affected by a local privilege escalation. The issue arises from vectors involving the internal use of pconfig with the +RESTART -host options, enabling a user with low privileges to escalate to higher privil...

CVE-2017-9453

CVE-2017-9453 affects BMC Server Automation prior to 8.9.01 patch 1. The root cause is an authentication bypass that enables the Process Spawner to execute commands, leading to potential remote compromise. The impact is reported as high/critical, with CVSS metrics indicating remote access without...