Buffer Overflow in NVIDIA DGX-1 BMC IPMI Handler
CVE-2023-25505
7.8HIGH
Summary
The NVIDIA DGX-1 BMC is affected by a buffer overflow vulnerability in its IPMI handler. An attacker with the appropriate authorization level may exploit this weakness, potentially leading to severe consequences including denial of service, exposure of sensitive information, or arbitrary code execution. Proper mitigation strategies are essential to safeguard systems against such vulnerabilities.
Affected Version(s)
NVIDIA DGX servers All BMC versions prior to 3.39.3
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved