Vulnerability in NVIDIA DGX-1 BMC IPMI Handler Allows Unauthorized File Access

CVE-2023-25508

What is CVE-2023-25508?

The NVIDIA DGX-1 BMC is impacted by a vulnerability in its IPMI handler. This issue allows an attacker with the appropriate authorization to upload and download arbitrary files under specific conditions. Exploiting this vulnerability could potentially lead to denial of service, privilege escalation, information disclosure, and unauthorized data modification. The risk underscores the importance of robust access controls in system management interfaces.

References