Lucene search

K

Dgx H100 Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve
cve

CVE-2023-25528

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

9.8CVSS

9.7AI Score

0.002EPSS

2023-09-20 01:15 AM
36
cve
cve

CVE-2023-25530

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

9.8CVSS

9.3AI Score

0.002EPSS

2023-09-20 01:15 AM
36
cve
cve

CVE-2023-25531

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges.

9.8CVSS

9.5AI Score

0.002EPSS

2023-09-20 01:15 AM
28
cve
cve

CVE-2023-25533

NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges.

9.8CVSS

9.4AI Score

0.002EPSS

2023-09-20 01:15 AM
31
cve
cve

CVE-2023-25534

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

9.8CVSS

9.4AI Score

0.002EPSS

2023-09-20 01:15 AM
26
cve
cve

CVE-2023-31009

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

9.8CVSS

9.3AI Score

0.002EPSS

2023-09-20 01:15 AM
2473