Medium severity6.7NVD Advisory· Published Apr 22, 2023· Updated Jun 17, 2026
CVE-2023-25508
CVE-2023-25508
Description
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Affected products
2- Range: All BMC versions prior to 3.39.3
Patches
Vulnerability mechanics
References
1- nvidia.custhelp.com/app/answers/detail/a_id/5458nvdVendor Advisory
News mentions
0No linked articles in our index yet.