CVE-2023-31037
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.
Published:Jan 24, 2024
Last Modified:Jun 9, 2025
EPS:Jan 24, 2024
EPSS Score:0.00094
CVSS Score:7.2
Affected Products
Vendor
Product
Action
Vendor
Nvidia
Product
Bluefield 2 Ga
Nvidia
Bluefield 2 Ga
Vendor
Nvidia
Product
Bluefield 2 Lts
Nvidia
Bluefield 2 Lts
Vendor
Nvidia
Product
Bluefield 3 Ga
Nvidia
Bluefield 3 Ga
Vendor
Nvidia
Product
Bluefield Bmc
Nvidia
Bluefield Bmc
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
