CVE-2023-25532

Katalog CVE

CVSS 7.5 · High EPSS 0,56%

Kerentanan Insufficiently Protected Credentials pada nvidia dgx h100 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure.

Rincian

Terbit di NVD

20 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 44,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5473 advisory vendor