BM
Product
Bmc
by Nvidia · last CVE Apr 22, 2023
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 4Low 0
Watch

Add Bmc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-25507
8.8
1%
Apr 22
NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to…
Affected: before 3.39.30
CVE-2023-25508
7.8
0%
Apr 22
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain…
Affected: before 3.39.30
CVE-2023-25505
7.8
0%
Apr 22
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow,…
Affected: before 3.39.30
CVE-2022-42287
7.8
0%
Jan 13
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of…
Affected: before 00.19.07
CVE-2022-42283
7.8
0%
Jan 13
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution
Affected: before 00.19.07
CVE-2022-42280
7.8
0%
Jan 13
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass
Affected: before 00.19.07
CVE-2022-42278
7.8
1%
Jan 13
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process,…
Affected: before 00.19.07
CVE-2022-42274
7.8
0%
Jan 13
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution
Affected: before 00.19.07
CVE-2022-42275
7.1
0%
Jan 13
NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections
Affected: before 00.19.07
Showing 9