CVE-2020-11616

Name of the Vulnerable Software and Affected Versions NVIDIA DGX servers versions prior to 3.38.30

Description The issue is related to a weakness in the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package, which implements the IPMI protocol in the AMI BMC firmware. This weakness may lead to information disclosure because the PRNG algorithm is not cryptographically strong.

Recommendations For versions prior to 3.38.30, update the BMC firmware to version 3.38.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPMI protocol to minimize the risk of exploitation.