DGX A100 BMC: LDAP injection in BMC auth

CVSS 6.5CVE-2023-31025NVIDIA / GPU stackcurated

Impact

LDAP injection in BMC auth

Who can reach it

Network-adjacent attacker

What to do

Flash BMC 00.22.05+

References

https://nvd.nist.gov/vuln/detail/CVE-2023-31025 https://github.com/NVIDIA/product-security/tree/main/2024/5510

Related entries

DGX A100 BMC: Full BMC compromise (heap buffer overflow) — worst-case out-of-band takeoverCVE-2023-31029 · DGX A100 BMCCritical
DGX A100 BMC: unauthenticated stack overflow in the host KVM daemon leads to RCECVE-2023-31024 · DGX A100 BMCCritical
DGX A100 BMC: Missing authentication on BMC serviceCVE-2023-31033 · DGX A100 BMCMedium
GPU Display Driver: DoS (null deref)CVE-2024-0078 · GPU Display DriverMedium
vGPU Manager: Guest-triggered host DoSCVE-2024-0079 · vGPU ManagerMedium
ChatRTX: XSSCVE-2024-0083 · ChatRTXMedium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.