Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

TI-2023-10813 CVE-2023-25508 · GHSA-8rcr-9q62-6h4p

Path traversal in NVIDIA DGX servers

Priority LOW 36

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial o…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00237 Published 2023-04-22 Fixed in 3.39.3 CWE-22
TI-2023-10812 CVE-2023-25507 · GHSA-cg7h-97r3-gc3j

OS command injection in NVIDIA DGX servers

Priority MEDIUM 42

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, infor…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00861 Published 2023-04-22 Fixed in 3.39.3 CWE-78
TI-2023-10810 CVE-2023-25505 · GHSA-5825-j5ch-93j4

Buffer overflow in NVIDIA DGX servers

Priority LOW 35

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, infor…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2023-04-22 Fixed in 3.39.3 CWE-120
TI-2023-00195 CVE-2023-0201 · GHSA-vgw2-6rfv-rmx5

Out-of-bounds write in NVIDIA DGX servers

Priority LOW 31

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integri…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00204 Published 2023-04-22 Fixed in 1.08.00 CWE-118
TI-2023-00194 CVE-2023-0200 · GHSA-2jpj-hq7g-8gxv

Out-of-bounds write in NVIDIA DGX servers

Priority LOW 34

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of s…

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00171 Published 2023-04-22 Fixed in 1.08.00 CWE-788
TI-2022-20509 CVE-2022-42287 · GHSA-476q-p4g6-6rx2

Path traversal in NVIDIA DGX servers

Priority LOW 35

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, inform…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00226 Published 2023-01-13 No fix listed CWE-22
TI-2022-20505 CVE-2022-42283 · GHSA-xpm8-wwj4-8r2r

Buffer overflow in NVIDIA DGX servers

Priority LOW 35

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2023-01-13 No fix listed CWE-120
TI-2022-20504 CVE-2022-42282 · GHSA-jx8f-64xg-p4fj

Path traversal in NVIDIA DGX servers

Priority LOW 29

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2023-01-13 No fix listed CWE-22
TI-2022-20502 CVE-2022-42280 · GHSA-ff9p-3jg4-r2j6

Path traversal in NVIDIA DGX servers

Priority LOW 36

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0027 Published 2023-01-13 No fix listed CWE-22
TI-2022-20500 CVE-2022-42278 · GHSA-chmh-mcvp-rwfv

Memory corruption in NVIDIA DGX servers

Priority LOW 37

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial o…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00599 Published 2023-01-13 No fix listed CWE-119
TI-2022-20497 CVE-2022-42275 · GHSA-gx2w-5rxr-3xm3

Authentication bypass in NVIDIA DGX servers

Priority LOW 33

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00202 Published 2023-01-13 No fix listed CWE-288
TI-2022-20496 CVE-2022-42274 · GHSA-r3f8-wm7p-pf3g

Buffer overflow in NVIDIA DGX servers

Priority LOW 36

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00268 Published 2023-01-13 No fix listed CWE-120