PT-2020-12635 · Nvidia+1 · Nvidia Dgx-1+2

Published 2020-10-29 · Updated 2020-11-05 · CVE-2020-11483

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA DGX-1 versions prior to 3.38.30 NVIDIA DGX-2 versions prior to 1.06.06

Description The issue concerns hard-coded credentials in the AMI BMC firmware, which may result in elevation of privileges or information disclosure.

Recommendations For NVIDIA DGX-1 versions prior to 3.38.30, update the BMC firmware to version 3.38.30 or later. For NVIDIA DGX-2 versions prior to 1.06.06, update the BMC firmware to version 1.06.06 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-11483

Affected Products

Ami Bmc

Nvidia Dgx-1

Nvidia Dgx-2

References · 3

• https://nvidia.custhelp.com/app/answers/detail/a_id/5010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11483 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11483 · Vendor Advisory