NVIDIA

Records1248All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical86CVSS 9.0–10.0

CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gpu Driver 127 records MEDIUM Virtual Gpu 98 records MEDIUM Gpu Display Driver 81 records MEDIUM Triton Inference Server 58 records MEDIUM Jetson Linux 49 records MEDIUM Cuda Toolkit 46 records LOW Nemo Megatron Bridge 43 records LOW Virtual Gpu Manager 39 records LOW

Records

15 records in Dgx H100 Firmware · all components

TI-2023-10838 CVE-2023-25533 · GHSA-794j-344v-pj4q

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 44

NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00785 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-10835 CVE-2023-25530 · GHSA-g8h7-2pwh-pvpv

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 44

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-10833 CVE-2023-25528 · GHSA-rwpc-6q3r-gfqf

Stack-based buffer overflow in NVIDIA DGX H100 BMC

MEDIUM 44

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00874 Published 2023-09-20 Fixed in 23.08.07 CWE-121

TI-2023-14746 CVE-2023-31009 · GHSA-p223-mw67-gp83

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-10839 CVE-2023-25534 · GHSA-6xmq-gwjj-r76j

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-10836 CVE-2023-25531 · GHSA-88mx-g3cg-pqhh

Insufficiently protected credentials in NVIDIA DGX H100 BMC

MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00478 Published 2023-09-20 Fixed in 23.08.07 CWE-522

TI-2023-14750 CVE-2023-31013 · GHSA-f6wv-382h-fphm

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-14749 CVE-2023-31012 · GHSA-x7fw-m9vx-wfj3

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-14747 CVE-2023-31010 · GHSA-c4j5-chm9-2hjc

Improper input validation in NVIDIA DGX H100 BMC

MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00693 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-14748 CVE-2023-31011 · GHSA-mxjh-8wc4-24vg

Improper input validation in NVIDIA DGX H100 BMC

LOW 39

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00568 Published 2023-09-20 Fixed in 23.08.07 CWE-20

TI-2023-10834 CVE-2023-25529 · GHSA-v8jc-h92c-w33g

Observable discrepancy in NVIDIA DGX H100 BMC

LOW 36

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server re…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00625 Published 2023-09-20 Fixed in 23.08.07, 00.22.05 CWE-208

TI-2023-10832 CVE-2023-25527 · GHSA-4g2v-p7fm-xrqm

Memory corruption in NVIDIA DGX H100 BMC

LOW 35

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00201 Published 2023-09-20 Fixed in 23.08.07 CWE-119

TI-2023-10837 CVE-2023-25532 · GHSA-hmx3-73v9-v4wx

Insufficiently protected credentials in NVIDIA DGX H100 BMC

LOW 34

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00555 Published 2023-09-20 Fixed in 23.08.07 CWE-522

TI-2023-14752 CVE-2023-31015 · GHSA-p64m-jmgx-fqcq

Improper authentication in NVIDIA DGX H100 BMC

LOW 33

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2023-09-20 Fixed in 23.08.07 CWE-287

TI-2023-14745 CVE-2023-31008 · GHSA-c3m2-v3j4-g4v3

Improper input validation in NVIDIA DGX H100 BMC

LOW 33

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2023-09-20 Fixed in 23.08.07 CWE-20

Open these records in search →

Critical	86
High	785
Medium	334
Low	43
No CVSS	0