Skip to content
OpenAdvisories
High · 8.8 CVE-2023-25528 EUVD-2023-29480GHSA-rwpc-6q3r-gfqf

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker ma…

Published Sep 20, 2023 · Updated Sep 24, 2024 · Assigned by nvidia

Description

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA DGX H100 BMC All versions prior to 23.08.07 —

References