Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-11485 2 Intel, Nvidia 2 Bmc Firmware, Dgx-1 2024-11-21 8.8 High
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request, which can lead to information disclosure or code execution.
CVE-2020-11484 2 Intel, Nvidia 2 Bmc Firmware, Dgx-1 2024-11-21 4.9 Medium
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of the BMC/IPMI user password, which may lead to information disclosure.
CVE-2020-11483 2 Intel, Nvidia 3 Bmc Firmware, Dgx-1, Dgx-2 2024-11-21 9.8 Critical
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-coded credentials, which may lead to elevation of privileges or information disclosure.