NetSight
high7.2

CVE-2023-31037

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call.

Impact

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.

Affected products

VendorProductAffected versions
NvidiaBluefield Bmc
Versions 2.8.2-46, 23.04, 23.07, 23.09

Weakness classification

References