Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-25508

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.

Published

2023-04-22T03:15:10.230

Last Modified

2024-11-21T07:49:38.190

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-22
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia bmc < 3.39.30 Yes
Hardware nvidia dgx-1 - No
References