DGX A100 BMC: Missing authentication on BMC service
CVSS 6.8CVE-2023-31033NVIDIA / GPU stackcurated
Impact
Missing authentication on BMC service
Who can reach it
Network-adjacent unauthenticated
What to do
Flash BMC 00.22.05+ out-of-band
References
Related entries
- DGX A100 BMC: LDAP injection in BMC authCVE-2023-31025 · DGX A100 BMCMedium
- DGX A100 BMC: Full BMC compromise (heap buffer overflow) — worst-case out-of-band takeoverCVE-2023-31029 · DGX A100 BMCCritical
- DGX A100 BMC: unauthenticated stack overflow in the host KVM daemon leads to RCECVE-2023-31024 · DGX A100 BMCCritical
- CUDA Toolkit: Memory-safety issueCVE-2024-0111 · CUDA ToolkitMedium
- RAPIDS cuDF / cuML: RCE via unsafe deserializationCVE-2024-0140 · RAPIDS cuDF / cuMLMedium
- Hopper HGX 8-GPU: DoS (inadequate loop termination in firmware)CVE-2024-0141 · Hopper HGX 8-GPUMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.