CVE-2023-25505: NVIDIA Bmc

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.

Affected products

• NVIDIA Bmc: before 3.39.30 (fixed in 3.39.30)

Published 2023-04-22. Last modified 2026-06-17.