CVE-2023-31015: High severity nvidia dgx h100 firmware vulnerability
Published Sep 20, 2023
·Updated
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.
Affected Software
2 affected components
Nvidia Dgx H100 Firmware<23.08.18
Nvidia DGX H100
Event History
Sep 20, 2023
CVE Published
via MITRE·01:12 AM
Data Sourced
via MITRE·01:12 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for NVIDIA DGX H100 BMC?
The vulnerability ID for NVIDIA DGX H100 BMC is CVE-2023-31015.
2
What is the severity rating of CVE-2023-31015?
CVE-2023-31015 has a severity rating of 7.8 (high).
3
What is the affected software for CVE-2023-31015?
The affected software for CVE-2023-31015 is NVIDIA DGX H100 BMC firmware version 23.08.18.
4
What are the potential impacts of exploiting CVE-2023-31015?
Exploiting CVE-2023-31015 may lead to escalation of privileges, information disclosure, code execution, and denial of service.
5
Where can I find more information about CVE-2023-31015?
You can find more information about CVE-2023-31015 at https://nvidia.custhelp.com/app/answers/detail/a_id/5473.