CVE-2023-25529 (dgx_h100_firmware)

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disclosure, escalation of privileges, and data tampering.

attacker bmc cve daemon data data tampering disclosure escalation exploit host information information disclosure leak may nvidia privileges server session tampering token unauthenticated vulnerability