Skip to content
OpenAdvisories
High · 7.8 CVE-2023-25505 EUVD-2023-29457GHSA-5825-j5ch-93j4

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of auth…

Published Apr 22, 2023 · Updated Feb 4, 2025 · Assigned by nvidia

Description

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC versions prior to 3.39.3 —

References