Improper Input Validation Vulnerability in NVIDIA DGX H100 BMC Web UI
CVE-2023-25533

8.3HIGH

Key Information:

Vendor
Nvidia
Status
Dgx H100 Bmc
Vendor
CVE Published:
20 September 2023

Summary

The NVIDIA DGX H100 BMC suffers from a vulnerability in its web user interface, where the system fails to properly validate input data. This flaw could allow an attacker to exploit the interface, leading to potential information disclosure, unauthorized code execution, and escalation of privileges. As a result, the integrity and confidentiality of the affected systems may be compromised.

Affected Version(s)

DGX H100 BMC All versions prior to 23.08.07

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5473

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.