DGX H100 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-20	CVE-2023-25532	Insufficiently Protected Credentials vulnerability in Nvidia DGX H100 Firmware NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. network low complexity nvidia CWE-522	7.5
2023-09-20	CVE-2023-25533	Unspecified vulnerability in Nvidia DGX H100 Firmware NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. network low complexity nvidia critical	9.8
2023-09-20	CVE-2023-25534	Unspecified vulnerability in Nvidia DGX H100 Firmware NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. network low complexity nvidia critical	9.8
2023-09-20	CVE-2023-31008	Improper Input Validation vulnerability in Nvidia DGX H100 Firmware NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. local low complexity nvidia CWE-20	7.8
2023-09-20	CVE-2023-31009	Improper Input Validation vulnerability in Nvidia DGX H100 Firmware NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. network low complexity nvidia CWE-20 critical	9.8