GPU VulnDB

Database/NVIDIA / GPU stack

DGX H100 BMC (openBMC): RCE on BMC (web server plugin stack overflow)

CVE-2023-25528NVIDIA / GPU stackcurated

Impact

RCE on BMC (web server plugin stack overflow)

Who can reach it

Network-adjacent attacker on the management LAN

What to do

Flash BMC to 23.08.18 out-of-band; segregate BMC network; no tenant eviction required

References

https://raw.githubusercontent.com/NVIDIA/product-security/main/2023/5473/5473.md

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.