CVE-2023-25532: High severity nvidia dgx h100 firmware vulnerability
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA DGX H100 BMC vulnerability?
The vulnerability ID for this NVIDIA DGX H100 BMC vulnerability is CVE-2023-25532.
What is the title of this vulnerability?
The title of this vulnerability is 'NVIDIA DGX H100 BMC contains a vulnerability in IPMI.'
What is the description of this vulnerability?
The description of this vulnerability is that an attacker may cause insufficient protection of credentials on the NVIDIA DGX H100 BMC, leading to information disclosure.
What software is affected by this vulnerability?
The NVIDIA DGX H100 BMC firmware version up to 23.08.18 is affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 7.5.
How can I fix this vulnerability?
To fix this vulnerability, NVIDIA recommends updating the affected DGX H100 BMC firmware to a version beyond 23.08.18. More details can be found in the provided reference.