Improper Authentication in NVIDIA DGX H100 BMC

CVE-2023-31015

What is CVE-2023-31015?

The NVIDIA DGX H100 BMC is affected by an improper authentication vulnerability in its REST service. This flaw allows a host user to potentially exploit the system, leading to serious consequences including privilege escalation, unauthorized information access, code execution, or even denial of service. Organizations using the DGX H100 should assess their exposure to this vulnerability and consider appropriate security measures.

References