Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w889-q2h7-4gw3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate the RSA 1024 public key used to verify the firmware signature, which may lead to information disclosure or code execution.

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate the RSA 1024 public key used to verify the firmware signature, which may lead to information disclosure or code execution.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 6.7
nvd
больше 5 лет назад

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate the RSA 1024 public key used to verify the firmware signature, which may lead to information disclosure or code execution.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-347