CVE-2020-11483: Critical severity intel bmc firmware vulnerability

Q: What is the vulnerability ID for this NVIDIA DGX server vulnerability?

The vulnerability ID is CVE-2020-11483.

Q: What is the severity of CVE-2020-11483?

The severity of CVE-2020-11483 is critical.

Q: Which NVIDIA DGX servers are affected by CVE-2020-11483?

All DGX-1 servers with BMC firmware versions prior to 3.38.30 and all DGX-2 servers with BMC firmware versions prior to 1.06.06 are affected.

Q: What is the impact of CVE-2020-11483?

CVE-2020-11483 may lead to elevation of privileges or information disclosure.

Q: How can I fix the vulnerability CVE-2020-11483?

To fix CVE-2020-11483, update your NVIDIA DGX server BMC firmware to version 3.38.30 or higher for DGX-1 servers and 1.06.06 or higher for DGX-2 servers.

Published Oct 29, 2020

Updated

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-coded credentials, which may lead to elevation of privileges or information disclosure.

Affected Software

4 affected components

Intel BMC firmware<3.38.30

Nvidia DGX-1

Intel BMC firmware<1.06.06

Nvidia DGX-2

Event History

Oct 29, 2020

CVE Published

via MITRE·03:35 AM

Data Sourced

via MITRE·03:35 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this NVIDIA DGX server vulnerability?

The vulnerability ID is CVE-2020-11483.

What is the severity of CVE-2020-11483?

The severity of CVE-2020-11483 is critical.

Which NVIDIA DGX servers are affected by CVE-2020-11483?

All DGX-1 servers with BMC firmware versions prior to 3.38.30 and all DGX-2 servers with BMC firmware versions prior to 1.06.06 are affected.

What is the impact of CVE-2020-11483?

CVE-2020-11483 may lead to elevation of privileges or information disclosure.

How can I fix the vulnerability CVE-2020-11483?