VYPR
Unrated severityNVD Advisory· Published Apr 22, 2023· Updated Feb 4, 2025

CVE-2023-25507

CVE-2023-25507

Description

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering.

Affected products

2
  • Nvidia/DGX-1 BMCllm-fuzzy
  • NVIDIA/NVIDIA DGX serversv5
    Range: All BMC versions prior to 3.39.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.