Medium severity4.9NVD Advisory· Published Oct 29, 2020· Updated Jun 17, 2026

CVE-2020-11484

Description

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of the BMC/IPMI user password, which may lead to information disclosure.

Affected products

Ami/BMC firmwarellm-fuzzy
Range: <3.38.30
Nvidia/DGXllm-fuzzy
Range: <3.38.30
Nvidia/DGX serverscpe-rescue
Range: All DGX-1 with BMC firmware versions prior to 3.38.30

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/5010nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000