CVE-2023-25530: Input Validation
Published Sep 20, 2023
·Updated
NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Affected Software
2 affected components
Nvidia Dgx H100 Firmware<23.08.18
Nvidia DGX H100
Event History
Sep 20, 2023
CVE Published
via MITRE·12:09 AM
Data Sourced
via MITRE·12:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this NVIDIA DGX H100 BMC vulnerability?
The vulnerability ID is CVE-2023-25530.
2
What is the severity level of CVE-2023-25530?
The severity level of CVE-2023-25530 is critical.
3
What is the affected software for CVE-2023-25530?
The affected software for CVE-2023-25530 is NVIDIA DGX H100 BMC firmware version up to and including 23.08.18.
4
What are the potential impacts of CVE-2023-25530?
The potential impacts of CVE-2023-25530 include code execution, denial of service, escalation of privileges, and information disclosure.
5
Where can I find more information about CVE-2023-25530?
You can find more information about CVE-2023-25530 at the following link: https://nvidia.custhelp.com/app/answers/detail/a_id/5473