DGX H100 BMC (REST): Code execution + privesc
CVSS 8.3CVE-2023-31009NVIDIA / GPU stackcurated
Impact
Code execution + privesc
Who can reach it
Network-adjacent BMC REST client
What to do
Flash BMC 23.08.18 out-of-band
References
Related entries
- DGX H100 BMC (REST): Privesc via auth flawCVE-2023-31015 · DGX H100 BMC (REST)Medium
- DGX H100 BMC: improper input validation in the REST service allows privilege escalation and info disclosureCVE-2023-31012 · DGX H100 BMC (REST)Medium
- DGX H100 BMC (REST): DoSCVE-2023-31011 · DGX H100 BMC (REST)Medium
- Container Toolkit: Container escape to host filesystem (bypass of the CVE-2024-0132 fix)CVE-2025-23359 · Container ToolkitHigh
- Jetson Xavier / Orin: Authentication bypass in a network serviceCVE-2026-24148 · Jetson Xavier / OrinHigh
- NVIDIA DGX A100 - SBIOS / SMM firmware: The BiosCfgTool reads and writes outside its bounds in SMRAM, handingCVE-2022-28200 · NVIDIA DGX A100 - SBIOS / SMM firmwareHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.