VYPR
← All advisories
High severity8.0NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026

CVE-2023-25529

CVE-2023-25529

Description

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disclosure, escalation of privileges, and data tampering.

Affected products

4
  • Nvidia/DGX A100 BMCllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: All BMC versions prior to 00.22.05
    • (no CPE)range: All versions prior to 23.08.07
  • Nvidia/DGX H100 BMCllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.