CVE-2020-11615: High severity intel bmc firmware vulnerability
Published Oct 29, 2020
·Updated
NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which it uses a hard-coded RC4 cipher key, which may lead to information disclosure.
Affected Software
2 affected components
Intel BMC firmware<3.38.30
Nvidia DGX-1
Event History
Oct 29, 2020
CVE Published
via MITRE·03:35 AM
Data Sourced
via MITRE·03:35 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-11615.
2
What is the severity of CVE-2020-11615?
The severity of CVE-2020-11615 is high with a severity value of 7.5.
3
What software is affected by CVE-2020-11615?
NVIDIA DGX servers with all BMC firmware versions prior to 3.38.30 are affected by CVE-2020-11615.
4
What is the impact of CVE-2020-11615?
The impact of CVE-2020-11615 is possible information disclosure.
5
How do I fix CVE-2020-11615?
To fix CVE-2020-11615, update the BMC firmware to version 3.38.30 or later.