Code Injection Vulnerability in NVIDIA Bluefield DPU BMC
CVE-2023-31037

7.2HIGH

Key Information:

Vendor

Nvidia
Status
Bluefield 2 Dpu Bmc, Bluefield 3 Dpu Bmc
Vendor
CVE Published:
24 January 2024

What is CVE-2023-31037?

The NVIDIA Bluefield 2 and Bluefield 3 DPU Baseboard Management Controller (BMC) contains a vulnerability in ipmitool that can be exploited by a root user through malicious network calls. This flaw allows an attacker to execute arbitrary code on the operating system level, potentially leading to system compromise. Organizations using these products must address this vulnerability promptly to safeguard their infrastructure against unauthorized access and potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Bluefield 2 DPU BMC, BlueField 3 DPU BMC LTS:2.8.2-46, 23.04, 23.07, 23.09

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5511

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.