What is CVE-2023-25529?

CVE-2023-25529 is a high-severity vulnerability in Nvidia Dgx A100 Bmc, classified under CWE-208. CVSS score: 8.0/10. Published 2023-09-20.

How severe is CVE-2023-25529?

High severity. CVSS v3 base score is 8.0 out of 10.

Vulnerability in Nvidia Dgx A100 Bmc

CVE-2023-25529

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successf…

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N.

Affected products

Nvidia Dgx A100 Bmc — versions All BMC versions prior to 00.22.05
Nvidia Dgx_h100
Nvidia Dgx H100 Bmc — versions All versions prior to 23.08.07
Nvidia Dgx_h100_firmware

Weakness classification (CWE)

References

psirt@nvidia.com (Vendor Advisory)
psirt@nvidia.com

Frequently asked questions

What is CVE-2023-25529?: CVE-2023-25529 is a high-severity vulnerability in Nvidia Dgx A100 Bmc, classified under CWE-208. CVSS score: 8.0/10. Published 2023-09-20.
How severe is CVE-2023-25529?: High severity. CVSS v3 base score is 8.0 out of 10.