NVIDIA · the BMC layer
PWX for DGX and HGX BMC
NVIDIA DGX and HGX BMC: the known vulnerabilities of its firmware, how to give a scanner read-only access, and the settings to check. Free, no account.
The BMC is one layer of PWX, which covers the stack from the tenant and its VMs to the host, BMC, CPU, GPU and TPU. See every layer
33 CVEs10 critical20 high0 exploited (KEV)
1. Known vulnerabilities
| CVE | Severity | Published | Summary |
|---|---|---|---|
| CVE-2025-23337 | medium 6.7 | 2025-09-17 | NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A succe... |
| CVE-2024-0114 | high 8.1 | 2025-03-05 | NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful ex... |
| CVE-2023-31033 | high 8 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of ... |
| CVE-2023-31030 | critical 9.8 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerabili... |
| CVE-2023-31025 | high 7.5 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure. |
| CVE-2023-31024 | critical 9.8 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vuln... |
| CVE-2023-31015 | high 7.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, informati... |
| CVE-2023-31013 | high 8.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information ... |
| CVE-2023-31012 | high 8.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information d... |
| CVE-2023-31011 | high 8.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information d... |
| CVE-2023-31010 | high 8.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and... |
| CVE-2023-31009 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escala... |
| CVE-2023-31008 | high 7.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of pri... |
| CVE-2023-25534 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of priv... |
| CVE-2023-25533 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and esc... |
| CVE-2023-25532 | high 7.5 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure. |
| CVE-2023-25531 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, infor... |
| CVE-2023-25530 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalat... |
| CVE-2023-25529 | high 8.1 | 2023-09-20 | NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server... |
| CVE-2023-25528 | critical 9.8 | 2023-09-20 | NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A succ... |
| CVE-2023-25527 | high 7.8 | 2023-09-20 | NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel... |
| CVE-2023-25508 | high 7.8 | 2023-04-22 | NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denia... |
| CVE-2023-25507 | high 8.8 | 2023-04-22 | NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, in... |
| CVE-2023-25505 | high 7.8 | 2023-04-22 | NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, in... |
| CVE-2020-11616 | high 7.5 | 2020-10-29 | NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package that implements the... |
Source: NVD, NVD CVE API 2.0: cpe:2.3:o:nvidia:dgx_h100_firmware, keyword "DGX BMC", keyword "HGX BMC", refreshed 2026-10-29 09:17 UTC. EXPLOITED = listed in the CISA KEV catalog.
2. Give a scanner read-only access
- Redfish (DGX GB200 compute tray, documented):
POST /redfish/v1/AccountService/Accountswith{"UserName":"pwx-ro","Password":"<long random>","RoleId":"ReadOnly"}; RoleId Administrator, Operator or ReadOnly. - DGX H100 web interface: Settings > User Management.
- Change the default administrator password at first login.
Sources: DGX GB200 compute tray Redfish commands · DGX H100 BMC
3. Settings that open the power path
- IPMI off when not needed:
/redfish/v1/Managers/BMC_0/NetworkProtocol,IPMI.ProtocolEnabled = false(GB200). - Hardware write protection on:
Chassis_0,Oem.Nvidia.HardwareWriteProtectEnable = true(GB200). - The BMC on an isolated management network or VLAN.
Sources: DGX GB200 Redfish commands · DGX B200: connecting · NVIDIA product security bulletins
Standard Redfish checks
| Redfish property | Want | Why |
|---|---|---|
| NetworkProtocol IPMI.ProtocolEnabled | false | IPMI 2.0 RAKP leaks password hashes to anyone who can reach the port (CVE-2013-4786). |
| NetworkProtocol Telnet.ProtocolEnabled | false | Credentials and commands travel in clear text. |
| NetworkProtocol HTTP.ProtocolEnabled | false | The web and Redfish interface is reachable without TLS. |
| NetworkProtocol SNMP.EnableSNMPv1 / EnableSNMPv2c | false (SNMPv3 only) | No authentication beyond a clear-text community string. |
| AccountService AccountLockoutThreshold | greater than 0 | With 0, BMC passwords can be guessed without limit. |
| HostInterface AuthenticationModes | no AuthNone | AuthNone lets any process on the host drive the BMC, and through it the power path, without credentials. |
| HostInterface CredentialBootstrapping.Enabled | false | The host OS can mint its own BMC account at any time. |
| Accounts with RoleId Administrator | one break-glass account | Each administrator can rewrite the power path. |
The Redfish Inspector checks each of these for you.
Vendor security advisories: www.nvidia.com/en-us/security/. New CVEs also appear in PWX news.
4. Check it
- One BMC, in your browser: collect its Redfish answers and paste them into the Redfish Inspector.
- All of them, from one machine that reaches the BMC network:
Every request is a GET and is written to a log next to the result. Nothing is sent anywhere else.curl -fsSL https://get.bareket.ai/pgdiscover | sh pgdiscover up 10.0.7.0/24 --credentials pwx-ro.cred --insecure - See what continuous monitoring adds: the Stack sandbox.
Free e-mail alerts
Get an e-mail when a new CVE lands for what you run
Run it on your own fleet
PWX Discover is free: the scan reads your fleet and lists what to fix, on your machine. PWX Monitor keeps watching every layer, from the tenant to the power rail, with attack paths and alerts in your SIEM. PWX Protect acts on the BMC. Start with a pilot.