PT-2020-12641
CVE-2020-11489
·
Published
2020-10-29
·
Updated
2021-07-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
NVIDIA DGX-1 versions prior to 3.38.30
NVIDIA DGX-2 versions prior to 1.06.06
Description
The issue concerns the use of default SNMP community strings in the AMI BMC firmware, potentially leading to information disclosure.
Recommendations
For NVIDIA DGX-1 versions prior to 3.38.30, update the BMC firmware to version 3.38.30 or later.
For NVIDIA DGX-2 versions prior to 1.06.06, update the BMC firmware to version 1.06.06 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾