Skip to content
OpenAdvisories
High · 7.2 CVE-2023-31037 EUVD-2023-35374GHSA-7vrx-mj2w-52mf

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network ca…

Published Jan 24, 2024 · Updated Jun 9, 2025 · Assigned by nvidia

Description

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.

Affected products

VendorProductAffectedFixed
NVIDIA Bluefield 2 DPU BMC, BlueField 3 DPU BMC LTS:2.8.2-46, 23.04, 23.07, 23.09 —

References