Vulnerability in NVIDIA DGX H100 BMC REST Service Allows for Code Execution and Privilege Escalation

Vulnerability in NVIDIA DGX H100 BMC REST Service Allows for Code Execution and Privilege Escalation

CVE-2023-31009 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Learn more about our Web Application Penetration Testing UK.