Description (CNA)
NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disclosure, escalation of privileges, and data tampering.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NVIDIA / DGX H100 BMC | affected All versions prior to 23.08.07 |
| NVIDIA / DGX A100 BMC | affected All BMC versions prior to 00.22.05 |
CWE
CWE-208
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5473
- https://nvidia.custhelp.com/app/answers/detail/a_id/5510
ADP enrichment
No English description supplied.