Nvidia Dgx H100 vulnerabilities

15 vulnerabilities

Known vulnerabilities in Nvidia Dgx H100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2023-31015nvidiadgx_h100_firmware+1
EPSS score
0.19%
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.8.8CVE-2023-31012nvidiadgx_h100_firmware+1
EPSS score
0.64%
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.8.8CVE-2023-31013nvidiadgx_h100_firmware+1
EPSS score
0.64%
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.7.8CVE-2023-31008nvidiadgx_h100_firmware+1
EPSS score
0.21%
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure.9.8CVE-2023-31009nvidiadgx_h100_firmware+1
EPSS score
0.71%
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.8.8CVE-2023-31011nvidiadgx_h100_firmware+1
EPSS score
0.57%
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.8.8CVE-2023-31010nvidiadgx_h100_firmware+1
EPSS score
0.69%
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and denial of service.9.8CVE-2023-25530nvidiadgx_h100_firmware+1
EPSS score
0.83%
NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.8.1CVE-2023-25529nvidiadgx a100 bmc+2
EPSS score
0.63%
NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disclosure, escalation of privileges, and data tampering.7.8CVE-2023-25527nvidiadgx_h100_firmware+1
EPSS score
0.20%
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information disclosure, and data tampering.7.5CVE-2023-25532nvidiadgx_h100_firmware+1
EPSS score
0.56%
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure.9.8CVE-2023-25531nvidiadgx_h100_firmware+1
EPSS score
0.48%
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges.9.8CVE-2023-25533nvidiadgx_h100_firmware+1
EPSS score
0.78%
NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges.9.8CVE-2023-25534nvidiadgx_h100_firmware+1
EPSS score
0.56%
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.9.8CVE-2023-25528nvidiadgx_h100_firmware+1
EPSS score
0.87%
NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.