CVE-2023-25531

Published: Sep 20, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges.

Affected (1)

Products: Nvidia: Dgx H100 Firmware

1 product

Dgx H100 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Dgx H100 Firmware	Before 23.08.18

Running on/with	Platform Versions
Nvidia Dgx H100	All versions

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5473

Source: psirt@nvidia.com

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5473

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.