by Kastro
Paper/Archive/CVE-2020-11486

CVE-2020-11486

NVIDIA NVIDIA DGX Servers — NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which softw…

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.1.861 × 2017.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be automatically processed within the product's environment, which may lead to remote code execution.

Affected

ProductAffectedFixed inSource
NVIDIA DGX ServersAll DGX-1 Servers with BMC firmware versions prior to 3.38.30–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refnvidia.custhelp.com/app/answers/detail/a_id/5010