All 15 CVE vulnerabilities found in DGX H100 BMC, with AI-generated Chinese analysis, references, and POCs.
This page aggregates Common Weakness Enumerations specifically affecting the Baseboard Management Controller of the NVIDIA DGX H100 server platform. It focuses on firmware, management interface, and hardware security vulnerabilities inherent to this critical infrastructure component. The collection includes a wide spectrum of security flaws, ranging from critical remote code execution risks and authentication bypasses to informational disclosure and privilege escalation issues within the BMC operating system. The data covers public vulnerabilities disclosed between 2021 and the current year, reflecting the lifecycle of the DGX H100 series and its associated management software updates. By consolidating these entries, the resource provides a comprehensive view of the evolving threat landscape targeting enterprise-grade AI hardware management controllers. Users can utilize this repository to track vendor advisories from NVIDIA and third-party security researchers, allowing for proactive risk assessment and patch management. It serves as a central reference point to understand specific weakness classes applicable to embedded management systems, such as IPMI or Redfish interface flaws. Additionally, administrators can look up the complete vulnerability history of the product to identify recurring patterns or legacy issues that may impact compliance and operational stability. This structured approach aids security teams in prioritizing remediation efforts based on severity and exploitability without navigating fragmented sources.
Vendor: NVIDIA
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-31015 | NVIDIA DGX 授权问题漏洞 CWE-287 | 6.6 | Medium | 2023-09-20 |
| CVE-2023-31013 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 6.1 | Medium | 2023-09-20 |
| CVE-2023-31012 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 6.1 | Medium | 2023-09-20 |
| CVE-2023-31011 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 5.2 | Medium | 2023-09-20 |
| CVE-2023-31010 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 6.8 | Medium | 2023-09-20 |
| CVE-2023-31009 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 8.3 | High | 2023-09-20 |
| CVE-2023-31008 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 7.3 | High | 2023-09-20 |
| CVE-2023-25534 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 5.7 | Medium | 2023-09-20 |
| CVE-2023-25533 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 8.3 | High | 2023-09-20 |
| CVE-2023-25532 | NVIDIA DGX 安全漏洞 CWE-522 | 6.5 | Medium | 2023-09-20 |
| CVE-2023-25531 | NVIDIA DGX 安全漏洞 CWE-522 | 7.6 | High | 2023-09-20 |
| CVE-2023-25530 | NVIDIA DGX 输入验证错误漏洞 CWE-20 | 8.0 | High | 2023-09-20 |
| CVE-2023-25529 | NVIDIA DGX 安全漏洞 CWE-208 | 8.0 | High | 2023-09-20 |
| CVE-2023-25528 | NVIDIA DGX 缓冲区错误漏洞 CWE-121 | 8.8 | High | 2023-09-20 |
| CVE-2023-25527 | NVIDIA DGX 缓冲区错误漏洞 CWE-119 | 7.8 | High | 2023-09-20 |
All 15 known CVE vulnerabilities affecting DGX H100 BMC with full Chinese analysis, references, and POCs where available.