CVE-2020-11616

Published: Oct 29, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package that implements the IPMI protocol is not cryptographically strong, which may lead to information disclosure.

Vendor	Product	Versions
NVIDIA	NVIDIA DGX Servers	affected `All DGX-1 with BMC firmware versions prior to 3.38.30`

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5010

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-11616

Description

Affected Products

References