VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 29, 2020· Updated Jun 17, 2026

CVE-2020-11483

CVE-2020-11483

Description

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-coded credentials, which may lead to elevation of privileges or information disclosure.

Affected products

3
  • Nvidia/DGX serverscpe-rescue2 versions
    All DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06+ 1 more
    • (no CPE)range: All DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06
    • (no CPE)
  • Intel/Bmc Firmware
    cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*
    Range: <3.38.30

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.