NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5473 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
22 Sep 2023, 17:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:nvidia:dgx_h100_firmware:*:*:*:*:bmc:*:*:* cpe:2.3:h:nvidia:dgx_h100:-:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Nvidia dgx H100 Firmware
Nvidia Nvidia dgx H100 |
|
CWE | CWE-787 | |
References | (MISC) https://nvidia.custhelp.com/app/answers/detail/a_id/5473 - Vendor Advisory |
20 Sep 2023, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-20 01:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-25528
Mitre link : CVE-2023-25528
CVE.ORG link : CVE-2023-25528
JSON object : View
Products Affected
nvidia
- dgx_h100_firmware
- dgx_h100