Vulnerability Details CVE-2020-11489
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2020-11489
-
cpe:2.3:h:nvidia:dgx-1:-
-
cpe:2.3:h:nvidia:dgx-2:-
-
cpe:2.3:o:intel:bmc_firmware:-
-
cpe:2.3:o:intel:bmc_firmware:1.06.06
-
cpe:2.3:o:intel:bmc_firmware:2.47