7.5
CVE-2020-11489
- EPSS 1.33%
- Veröffentlicht 29.10.2020 04:15:11
- Zuletzt bearbeitet 21.11.2024 04:58:00
- Erkennungen
LoginNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Bmc Firmware Version < 3.38.30
Intel ≫ Bmc Firmware Version < 1.06.06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.33% | 0.681 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-1188 Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
https://nvidia.custhelp.com/app/answers/detail/a_id/5010