Approved changes feed: RSS · Atom
cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Nvidia (40c2793d-f37d-5eb8-a9a9-0c9926e4695b) |
|---|---|
| Product | Bmc (fadf1742-0dd1-5331-8589-3ed436106fd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-25508 |
vulnerable | 2026-06-08 05:56:09.105431 |
Details available
MEDIUM (6.7)
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2023-04-22T02:32:04.737Z
Updated: 2025-02-04T19:03:07.602Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25507 |
vulnerable | 2026-06-08 05:56:09.105050 |
Details available
HIGH (7.2)
NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering.
Published: 2023-04-22T02:31:16.047Z
Updated: 2025-02-04T19:03:26.066Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25505 |
vulnerable | 2026-06-08 05:56:09.102283 |
Details available
HIGH (7.8)
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.
Published: 2023-04-22T02:29:45.535Z
Updated: 2025-02-04T19:04:20.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0201 |
vulnerable | 2026-06-08 05:52:04.507882 |
Details available
MEDIUM (6.7)
NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
Published: 2023-04-22T02:22:51.372Z
Updated: 2025-02-04T19:16:43.629Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0200 |
vulnerable | 2026-06-08 05:52:04.506384 |
Details available
HIGH (7.5)
NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure.
Published: 2023-04-22T02:21:13.210Z
Updated: 2025-02-04T19:17:11.381Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42287 |
vulnerable | 2026-06-08 05:49:29.701194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42284 |
vulnerable | 2026-06-08 05:49:29.695809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42283 |
vulnerable | 2026-06-08 05:49:29.695060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42282 |
vulnerable | 2026-06-08 05:49:29.694514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42280 |
vulnerable | 2026-06-08 05:49:29.693236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42278 |
vulnerable | 2026-06-08 05:49:29.692037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42275 |
vulnerable | 2026-06-08 05:49:29.686555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42274 |
vulnerable | 2026-06-08 05:49:29.685924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.