News

BMC security news

New CVEs in BMC firmware and new entries in the CISA Known Exploited Vulnerabilities catalog, for iDRAC, iLO, Supermicro BMC, MegaRAC and OpenBMC, DGX and HGX BMC, XClarity Controller. Updated automatically. Follow it in any reader: Atom feed.

2026-10-05 New CVE: CVE-2026-79820 critical 9 iLO
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.
2026-09-24 New CVE: CVE-2026-18857 low 3.4 MegaRAC and OpenBMC
IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC i
2026-09-15 New CVE: CVE-2026-16141 high 8.1 MegaRAC and OpenBMC
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose H
2026-09-15 New CVE: CVE-2026-16140 high 8.8 MegaRAC and OpenBMC
OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while still maintaining the original integrity and encryption keys. Several downstream vendors implement p
2026-09-09 New CVE: CVE-2026-23855 high 7.2 iDRAC
Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacke
2026-08-26 New CVE: CVE-2026-79940 medium 5.9 iDRAC
Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.
2026-08-22 New CVE: CVE-2026-74694 unknown MegaRAC and OpenBMC
In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number of bytes to copy from the attacker-controlled ncsi_pkt_hdr.length field of the in-band packet header, while th
2026-08-19 New CVE: CVE-2026-18849 medium 6.8 MegaRAC and OpenBMC
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and a
2026-08-17 New CVE: CVE-2026-70412 low 3.5 iDRAC
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosur
2026-08-05 New CVE: CVE-2026-63457 medium 6.5 iLO
A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.
2026-07-28 New CVE: CVE-2026-8058 medium 4.9 MegaRAC and OpenBMC
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
2026-07-28 New CVE: CVE-2026-7868 high 8.8 MegaRAC and OpenBMC
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges.
2026-07-22 New CVE: CVE-2026-3821 high 8.8 Supermicro BMC
Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service (DoS) attack against the BMC.
2026-06-09 New CVE: CVE-2026-28262 medium 6 iDRAC
Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
2026-06-04 New CVE: CVE-2026-3820 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended comma
2026-05-27 New CVE: CVE-2026-7254 medium 5.3 MegaRAC and OpenBMC
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users.
2026-05-05 New CVE: CVE-2026-42997 high 7.7 iDRAC
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is
2026-04-29 New CVE: CVE-2026-35155 high 7.1 iDRAC
Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.
2026-01-16 New CVE: CVE-2025-12007 high 8.4 Supermicro BMC
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image.
2026-01-16 New CVE: CVE-2025-12006 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can update the system firmware with a specially crafted image.
2025-11-18 New CVE: CVE-2025-8727 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability.
2025-11-18 New CVE: CVE-2025-8404 medium 5.5 Supermicro BMC
Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system.
2025-11-18 New CVE: CVE-2025-8076 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability.
2025-11-13 New CVE: CVE-2025-7704 medium 5.4 Supermicro BMC
Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability
2025-11-06 New CVE: CVE-2025-22397 medium 4.9 iDRAC
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restric
2025-09-25 New CVE: CVE-2025-26482 medium 4.9 iDRAC
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
2025-09-23 New CVE: CVE-2024-21927 medium 5 MegaRAC and OpenBMC
Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.
2025-09-19 New CVE: CVE-2025-7937 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image.
2025-09-19 New CVE: CVE-2025-6198 high 7.2 Supermicro BMC
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image.
2025-09-17 New CVE: CVE-2025-23337 medium 6.7 DGX and HGX BMC
NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution,
2025-06-25 EXPLOITED added to CISA KEV: CVE-2024-54085 critical 10 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2025-06-12 New CVE: CVE-2025-27689 high 7.8 iDRAC
Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
2025-03-11 New CVE: CVE-2024-54085 critical 10 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2025-03-05 New CVE: CVE-2024-0114 high 8.1 DGX and HGX BMC
NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial
2025-02-12 New CVE: CVE-2025-20097 medium 5.3 MegaRAC and OpenBMC
Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access.
2025-02-04 New CVE: CVE-2024-10237 high 7.2 Supermicro BMC
There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process
2025-01-14 New CVE: CVE-2024-45102 medium 6.8 XClarity Controller
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.
2024-09-13 New CVE: CVE-2024-8281 high 7.2 XClarity Controller
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
2024-09-13 New CVE: CVE-2024-8280 high 7.2 XClarity Controller
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
2024-09-13 New CVE: CVE-2024-8279 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
2024-09-13 New CVE: CVE-2024-8278 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
2024-09-13 New CVE: CVE-2024-8059 medium 4.3 XClarity Controller
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
2024-09-13 New CVE: CVE-2024-45101 medium 6.8 XClarity Controller
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.
2024-09-06 New CVE: CVE-2023-52916 high 7.8 MegaRAC and OpenBMC
In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When capturing 1600x900, system could crash when system memory usage is tight. The way to reproduce this issue: 1. Use 1600x900 to display on host 2. M
2024-08-14 New CVE: CVE-2023-49144 high 8.1 MegaRAC and OpenBMC
Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access.
2024-08-14 New CVE: CVE-2023-35123 medium 5.9 MegaRAC and OpenBMC
Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow an authenticated user to potentially enable denial of service via network access.
2024-08-13 New CVE: CVE-2024-35124 high 7.5 MegaRAC and OpenBMC
A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 290674.
2024-07-31 New CVE: CVE-2024-41660 critical 9.8 MegaRAC and OpenBMC
slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the s
2024-07-26 New CVE: CVE-2024-38512 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
2024-07-26 New CVE: CVE-2024-38511 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
2024-07-26 New CVE: CVE-2024-38510 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
2024-07-26 New CVE: CVE-2024-38509 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
2024-07-26 New CVE: CVE-2024-38508 high 7.2 XClarity Controller
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
2024-07-11 New CVE: CVE-2024-36435 critical 9.8 Supermicro BMC
An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). An unauthenticated user can post crafted data to the interface that triggers a stack buffer overflow, and may lead to arbitrary remote code executio
2024-06-29 New CVE: CVE-2024-25943 critical 9.8 iDRAC
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable applic
2024-06-27 New CVE: CVE-2024-31916 high 7.5 MegaRAC and OpenBMC
IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
2024-03-27 New CVE: CVE-2023-40289 high 7.2 Supermicro BMC
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
2024-02-14 New CVE: CVE-2023-32280 medium 5.3 MegaRAC and OpenBMC
Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access.
2024-02-14 New CVE: CVE-2023-31189 high 8.8 MegaRAC and OpenBMC
Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.
2024-01-12 New CVE: CVE-2023-31033 high 8 DGX and HGX BMC
NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disc
2024-01-12 New CVE: CVE-2023-31030 critical 9.8 DGX and HGX BMC
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, inf
2024-01-12 New CVE: CVE-2023-31025 high 7.5 DGX and HGX BMC
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
2024-01-12 New CVE: CVE-2023-31024 critical 9.8 DGX and HGX BMC
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of servi
2024-01-09 New CVE: CVE-2023-3043 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-37297 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-37296 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-37295 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-37294 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-37293 high 8.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-34333 high 7.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2024-01-09 New CVE: CVE-2023-34332 high 7.8 MegaRAC and OpenBMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
2023-12-19 New CVE: CVE-2023-50272 critical 9.8 iLO
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability could be remotely exploited to allow authentication bypass.
2023-10-25 New CVE: CVE-2023-4608 high 7.2 XClarity Controller
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
2023-10-25 New CVE: CVE-2023-4607 high 8.8 XClarity Controller
An authenticated XCC user can change permissions for any user through a crafted API command.
2023-10-25 New CVE: CVE-2023-4606 high 8.1 XClarity Controller
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
2023-10-18 New CVE: CVE-2023-30911 high 7.5 iLO
HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.
2023-09-20 New CVE: CVE-2023-31015 high 7.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.
2023-09-20 New CVE: CVE-2023-31013 high 8.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
2023-09-20 New CVE: CVE-2023-31012 high 8.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
2023-09-20 New CVE: CVE-2023-31011 high 8.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
2023-09-20 New CVE: CVE-2023-31010 high 8.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and denial of service.
2023-09-20 New CVE: CVE-2023-31009 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.
2023-09-20 New CVE: CVE-2023-31008 high 7.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure.
2023-09-20 New CVE: CVE-2023-25534 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
2023-09-20 New CVE: CVE-2023-25533 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges.
2023-09-20 New CVE: CVE-2023-25532 high 7.5 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure.
2023-09-20 New CVE: CVE-2023-25531 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges.
2023-09-20 New CVE: CVE-2023-25530 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.
2023-09-20 New CVE: CVE-2023-25529 high 8.1 DGX and HGX BMC
NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead
2023-09-20 New CVE: CVE-2023-25528 critical 9.8 DGX and HGX BMC
NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code
2023-09-20 New CVE: CVE-2023-25527 high 7.8 DGX and HGX BMC
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, i
2023-07-31 New CVE: CVE-2023-35861 critical 9.8 Supermicro BMC
A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
2023-07-18 New CVE: CVE-2023-34330 high 8.8 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
2023-07-18 New CVE: CVE-2023-34329 high 8 MegaRAC and OpenBMC
AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.
2023-07-05 New CVE: CVE-2023-34473 high 8.8 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
2023-07-05 New CVE: CVE-2023-34472 medium 6.5 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity.
2023-07-05 New CVE: CVE-2023-34471 high 8.1 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication.
2023-07-05 New CVE: CVE-2023-34338 critical 9.8 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
2023-07-05 New CVE: CVE-2023-34337 high 8.8 MegaRAC and OpenBMC
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
2023-06-12 New CVE: CVE-2023-34335 critical 9.1 MegaRAC and OpenBMC
AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability may lead to a loss of integrity or denial of service.

Free e-mail alerts

Get an e-mail when a new CVE lands for what you run

Run it on your own fleet

PWX Discover is free: the scan reads your fleet and lists what to fix, on your machine. PWX Monitor keeps watching every layer, from the tenant to the power rail, with attack paths and alerts in your SIEM. PWX Protect acts on the BMC. Start with a pilot.

Start a pilot Run the free scan