VYPR

DGX-1 BMC

by Nvidia

CVEs (3)

  • CVE-2023-25505HigApr 22, 2023
    risk 0.51cvss 7.8epss 0.00

    NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.

  • CVE-2023-25507HigApr 22, 2023
    risk 0.47cvss 7.2epss 0.01

    NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering.

  • CVE-2023-25508MedApr 22, 2023
    risk 0.44cvss 6.7epss 0.00

    NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information…