Skip to main content

Vendor/product archive

nvidia / dgx-1 CVEs

Beta · best-effort

15 CVEs tagged to nvidia / dgx-12 Critical, 9 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2023-25509

Published Apr 22, 2023

NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.

CVSS 6.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25508

Published Apr 22, 2023

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain…

CVSS 6.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25507

Published Apr 22, 2023

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2023-25506

Published Apr 22, 2023

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, wh…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-25505

Published Apr 22, 2023

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, w…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0209

Published Apr 22, 2023

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, deni…

CVSS 8.2 · High
Vendor/product tagsBeta · best-effort

CVE-2020-11616

Published Oct 29, 2020

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used i…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2020-11615

Published Oct 29, 2020

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which it uses a hard-coded RC4 cipher key, which may lead to inf…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2020-11486

Published Oct 29, 2020

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transf…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2020-11485

Published Oct 29, 2020

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web appl…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-11484

Published Oct 29, 2020

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can…

CVSS 4.9 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-15 of 15 CVEsPage 1 of 1