HIGH🇵🇱 Wersja polska

CVE-2023-31037

CVSS 7.2v3.1pub. 2024-01-24upd. 2024-11-21

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Nvidia Bluefield 2 Ga

    HW
    Nvidia
    all versions

  • Nvidia Bluefield 2 Lts

    HW
    Nvidia
    all versions

  • Nvidia Bluefield 3 Ga

    HW
    Nvidia
    all versions

  • Nvidia Bluefield Bmc

    APP
    Nvidia
    23.0423.0723.092.8.2-46
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCECommand Injection
CWE
References

Related vulnerabilities

CVE-2023-25519HIGH7.8same product

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restric...

CVE-2026-65083CRITICAL9.9same vendor

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could c...

CVE-2026-65093CRITICAL9.9same vendor

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successf...

CVE-2026-47627CRITICAL9.8same vendor

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal...

CVE-2026-24254CRITICAL9.8PL ✓same vendor

NVIDIA Dynamo (Linux) — zapis poza granicami bufora w warstwie multimodal serving