CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2023-09-20

Last modified

2024-09-24

Weaknesses

CWE-287

Affected products

• Dgx H100 Bmc (Nvidia)
• Dgx H100 Firmware (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5473