Buffer Overflow in NVIDIA DGX-1 BMC IPMI Handler
CVE-2023-25505

7.8HIGH

Key Information:

Vendor
Nvidia
Vendor
CVE Published:
22 April 2023

Summary

The NVIDIA DGX-1 BMC is affected by a buffer overflow vulnerability in its IPMI handler. An attacker with the appropriate authorization level may exploit this weakness, potentially leading to severe consequences including denial of service, exposure of sensitive information, or arbitrary code execution. Proper mitigation strategies are essential to safeguard systems against such vulnerabilities.

Affected Version(s)

NVIDIA DGX servers All BMC versions prior to 3.39.3

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.