PT-2020-12637
CVE-2020-11485
·
تاريخ النشر
2020-10-29
·
تاريخ التحديث
2020-11-05
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30
Description
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware. This vulnerability occurs because the web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. As a result, it can lead to information disclosure or code execution.
Recommendations
For NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, update the BMC firmware to version 3.38.30 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾