Insufficient Credential Protection in NVIDIA DGX H100 BMC

CVE-2023-25531

What is CVE-2023-25531?

The NVIDIA DGX H100 Baseboard Management Controller (BMC) has a flaw within the Intelligent Platform Management Interface (IPMI) that results in insufficient credential protection. This vulnerability could potentially allow an attacker to exploit the system, leading to various negative outcomes including code execution, denial of service, information disclosure, and privilege escalation. It’s crucial for users to update their systems and implement security measures to mitigate the risks associated with this vulnerability.

References