Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-25528

Опубликовано: 20 сент. 2023
Источник: nvd
CVSS3: 8.8
CVSS3: 9.8
EPSS Низкий

Описание

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:nvidia:dgx_h100_firmware:*:*:*:*:bmc:*:*:*
Версия до 23.08.18 (исключая)
cpe:2.3:h:nvidia:dgx_h100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 65%
0.00492
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 8.8
github
больше 2 лет назад

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

EPSS

Процентиль: 65%
0.00492
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787