Nvidia Dgx H100 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Nvidia Dgx H100 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2023-25528 — CVSS 8.8 (high): NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker…
• CVE-2023-25533 — CVSS 8.3 (high): NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of…
• CVE-2023-31009 — CVSS 8.3 (high): NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful…
• CVE-2023-25529 — CVSS 8.0 (high): NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of…
• CVE-2023-25530 — CVSS 8.0 (high): NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful…
• CVE-2023-25527 — CVSS 7.8 (high): NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel…
• CVE-2023-25531 — CVSS 7.6 (high): NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful…
• CVE-2023-31008 — CVSS 7.3 (high): NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this…
• CVE-2023-31010 — CVSS 6.8 (medium): NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this…
• CVE-2023-31015 — CVSS 6.6 (medium): NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful…
• CVE-2023-25532 — CVSS 6.5 (medium): NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful…
• CVE-2023-31012 — CVSS 6.1 (medium): NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful…
• CVE-2023-31013 — CVSS 6.1 (medium): NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful…
• CVE-2023-25534 — CVSS 5.7 (medium): NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this…
• CVE-2023-31011 — CVSS 5.2 (medium): NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful…