VYPR
← All advisories
High severity7.2NVD Advisory· Published Jan 24, 2024· Updated Jun 17, 2026

CVE-2023-31037

CVE-2023-31037

Description

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.

Affected products

6
  • Nvidia/Bluefield Bmc4 versions
    cpe:2.3:a:nvidia:bluefield_bmc:2.8.2-46:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:a:nvidia:bluefield_bmc:2.8.2-46:*:*:*:lts:*:*:*
    • cpe:2.3:a:nvidia:bluefield_bmc:23.04:*:*:*:-:*:*:*
    • cpe:2.3:a:nvidia:bluefield_bmc:23.07:*:*:*:-:*:*:*
    • cpe:2.3:a:nvidia:bluefield_bmc:23.09:*:*:*:-:*:*:*
  • Nvidia/Bluefield 2 DPU BMCllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: LTS:2.8.2-46, 23.04, 23.07, 23.09

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.