Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: NVIDIA Component: Dgx H100 Firmware Clear all filters
TI-2023-14752 CVE-2023-31015 · GHSA-p64m-jmgx-fqcq

Improper authentication in NVIDIA DGX H100 BMC

Priority LOW 33

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2023-09-20 Fixed in 23.08.07 CWE-287
TI-2023-14750 CVE-2023-31013 · GHSA-f6wv-382h-fphm

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-14749 CVE-2023-31012 · GHSA-x7fw-m9vx-wfj3

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-14748 CVE-2023-31011 · GHSA-mxjh-8wc4-24vg

Improper input validation in NVIDIA DGX H100 BMC

Priority LOW 39

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00568 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-14747 CVE-2023-31010 · GHSA-c4j5-chm9-2hjc

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 41

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00693 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-14746 CVE-2023-31009 · GHSA-p223-mw67-gp83

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-14745 CVE-2023-31008 · GHSA-c3m2-v3j4-g4v3

Improper input validation in NVIDIA DGX H100 BMC

Priority LOW 33

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-10839 CVE-2023-25534 · GHSA-6xmq-gwjj-r76j

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-10838 CVE-2023-25533 · GHSA-794j-344v-pj4q

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 44

NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00785 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-10837 CVE-2023-25532 · GHSA-hmx3-73v9-v4wx

Insufficiently protected credentials in NVIDIA DGX H100 BMC

Priority LOW 34

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00555 Published 2023-09-20 Fixed in 23.08.07 CWE-522
TI-2023-10836 CVE-2023-25531 · GHSA-88mx-g3cg-pqhh

Insufficiently protected credentials in NVIDIA DGX H100 BMC

Priority MEDIUM 43

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00478 Published 2023-09-20 Fixed in 23.08.07 CWE-522
TI-2023-10835 CVE-2023-25530 · GHSA-g8h7-2pwh-pvpv

Improper input validation in NVIDIA DGX H100 BMC

Priority MEDIUM 44

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2023-09-20 Fixed in 23.08.07 CWE-20
TI-2023-10834 CVE-2023-25529 · GHSA-v8jc-h92c-w33g

Observable discrepancy in NVIDIA DGX H100 BMC

Priority LOW 36

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server re…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00625 Published 2023-09-20 Fixed in 23.08.07, 00.22.05 CWE-208
TI-2023-10833 CVE-2023-25528 · GHSA-rwpc-6q3r-gfqf

Stack-based buffer overflow in NVIDIA DGX H100 BMC

Priority MEDIUM 44

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00874 Published 2023-09-20 Fixed in 23.08.07 CWE-121
TI-2023-10832 CVE-2023-25527 · GHSA-4g2v-p7fm-xrqm

Memory corruption in NVIDIA DGX H100 BMC

Priority LOW 35

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00201 Published 2023-09-20 Fixed in 23.08.07 CWE-119