VULNERABILITY INTELLIGENCE

CVE-2023-25529

CVSS score8.1 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2023-09-20
Last modified2026-06-17

Description

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disc…