DGX H100 BMC (KVM): Code execution + privesc
CVSS 8.0CVE-2023-25530NVIDIA / GPU stackcurated
Impact
Code execution + privesc
Who can reach it
Network-adjacent BMC user
What to do
Flash BMC 23.08.18 out-of-band
References
Related entries
- Triton Inference Server: RCE / privesc via input-validation failureCVE-2025-23268 · Triton Inference ServerHigh
- Cumulus Linux / NVOS: Privesc to switch adminCVE-2025-33179 · Cumulus Linux / NVOSHigh
- Cumulus Linux / NVOS: Command injectionCVE-2025-33180 · Cumulus Linux / NVOSHigh
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An attacker tampers with hardware controls directlyCVE-2025-33188 · NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmwareHigh
- NeMo Framework: Remote RCE via insecure deserialization over the networkCVE-2025-33245 · NeMo FrameworkHigh
- Triton Inference Server: Info disclosure / RCE (OOB read in tensor processing)CVE-2026-24213 · Triton Inference ServerHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.