Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering.

Published

2023-04-22T03:15:10.167

Last Modified

2024-11-21T07:49:38.080

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia bmc < 3.39.30 Yes
Hardware nvidia dgx-1 - No
References