Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5458
CVE ID: CVE-2023-25509 State: PUBLISHED Published: 2023-04-22T02:32:42.396Z Last Updated: 2025-02-04T19:02:38.257Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-119 Description: NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5458
CVE ID: CVE-2023-25510 State: PUBLISHED Published: 2023-04-22T02:33:42.044Z Last Updated: 2025-02-04T19:02:16.147Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5456
CVE ID: CVE-2023-25511 State: PUBLISHED Published: 2023-04-22T02:34:16.263Z Last Updated: 2025-02-04T17:45:15.728Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-369 Description: NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5456
CVE ID: CVE-2023-25512 State: PUBLISHED Published: 2023-04-22T02:35:01.098Z Last Updated: 2025-02-04T17:41:48.660Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custh
sclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5456
CVE ID: CVE-2023-25513 State: PUBLISHED Published: 2023-04-22T02:35:39.055Z Last Updated: 2025-02-04T17:40:37.196Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5456
CVE ID: CVE-2023-25514 State: PUBLISHED Published: 2023-04-22T02:36:23.070Z Last Updated: 2025-02-04T16:34:21.619Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
CVE ID: CVE-2023-25515 State: PUBLISHED Published: 2023-06-23T17:07:50.994Z Last Updated: 2024-11-29T14:34:40.209Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Driver for Windows and Linux Problem Types: CWE-822 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE ID: CVE-2023-25516 State: PUBLISHED Published: 2023-07-03T23:26:36.464Z Last Updated: 2024-10-24T19:52:38.807Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: NVIDIA Products: GPU Display Driver for Linux Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE ID: CVE-2023-25517 State: PUBLISHED Published: 2023-07-03T23:27:05.649Z Last Updated: 2024-12-04T17:18:54.820Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: vGPU software Problem Types: CWE-285 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE ID: CVE-2023-25518 State: PUBLISHED Published: 2023-06-23T17:09:10.859Z Last Updated: 2024-11-29T14:31:08.192Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX Problem Types: CWE-923 Description: NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA
al of service, information disclosure, and loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5466
CVE ID: CVE-2023-25519 State: PUBLISHED Published: 2023-09-12T00:49:21.411Z Last Updated: 2024-09-26T14:54:04.307Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: BlueField 1, BlueField 2 LTS, BlueField 2 GA, BlueField 3 GA Problem Types: CWE-286 Description: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479
CVE ID: CVE-2023-25520 State: PUBLISHED Published: 2023-06-23T17:23:21.837Z Last Updated: 2024-11-07T19:07:37.748Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX Problem Types: CWE-20 Description: NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5466
CVE ID: CVE-2023-25521 State: PUBLISHED Published: 2023-07-03T23:27:26.659Z Last Updated: 2024-11-27T20:19:57.508Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX A100/A800 Problem Types: CWE-250 Description: NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.
ring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5461
CVE ID: CVE-2023-25522 State: PUBLISHED Published: 2023-07-03T23:27:41.361Z Last Updated: 2024-11-25T16:54:04.108Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX A100/A800 Problem Types: CWE-20 Description: NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5461
CVE ID: CVE-2023-25523 State: PUBLISHED Published: 2023-07-03T23:27:59.201Z Last Updated: 2024-10-24T19:42:04.591Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5469
CVE ID: CVE-2023-25524 State: PUBLISHED Published: 2023-08-03T16:34:47.809Z Last Updated: 2024-10-09T20:26:41.730Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: Omniverse Workstation Launcher Problem Types: CWE-598 Description: NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
his vulnerability may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5472
CVE ID: CVE-2023-25525 State: PUBLISHED Published: 2023-09-20T00:03:02.330Z Last Updated: 2024-09-24T20:24:10.227Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: Cumulus Linux Problem Types: CWE-284 Description: NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5480
CVE ID: CVE-2023-25526 State: PUBLISHED Published: 2023-09-20T00:04:40.571Z Last Updated: 2024-09-24T18:10:49.247Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Cumulus Linux Problem Types: CWE-248 Description: NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet. A successful exploit may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5480
CVE ID: CVE-2023-25527 State: PUBLISHED Published: 2023-09-20T00:06:08.902Z Last Updated: 2024-09-24T15:54:28.023Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-119 Description: NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.co
ng. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25528 State: PUBLISHED Published: 2023-09-20T00:07:01.320Z Last Updated: 2024-09-24T15:54:13.035Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-121 Description: NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
ion disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25529 State: PUBLISHED Published: 2023-09-20T00:08:17.345Z Last Updated: 2024-08-02T11:25:19.194Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: NVIDIA Products: DGX H100 BMC, DGX A100 BMC Problem Types: CWE-208 Description: NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information disclosure, escalation of privileges, and data tampering. Additional Analyst Notes: - CVE Program Container: References: - https://
escalation of privileges, and data tampering. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473 - https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE ID: CVE-2023-25530 State: PUBLISHED Published: 2023-09-20T00:09:17.195Z Last Updated: 2024-09-24T15:53:30.682Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25531 State: PUBLISHED Published: 2023-09-20T00:28:07.810Z Last Updated: 2024-09-24T15:53:18.947Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-522 Description: NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25532 State: PUBLISHED Published: 2023-09-20T00:29:20.539Z Last Updated: 2024-09-24T15:26:31.449Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-522 Description: NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25533 State: PUBLISHED Published: 2023-09-20T00:54:06.187Z Last Updated: 2024-09-24T15:52:41.145Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code execution, and escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25534 State: PUBLISHED Published: 2023-09-20T00:55:00.275Z Last Updated: 2024-09-24T15:26:08.196Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-25535 State: PUBLISHED Published: 2024-02-14T07:23:39.610Z Last Updated: 2024-08-06T19:19:14.615Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: SupportAssist Client Consumer Problem Types: CWE-269 Description: Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211410/dell
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211410/dell-supportassist-for-home-pcs-security-update-for-installer-executable-file-for-local-privilege-escalation-lpe-vulnerability
CVE ID: CVE-2023-25536 State: PUBLISHED Published: 2023-03-02T15:55:12.109Z Last Updated: 2025-03-05T20:58:22.584Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-200 Description: Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for
ichment: References: - https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security
CVE ID: CVE-2023-25537 State: PUBLISHED Published: 2023-05-22T10:48:45.847Z Last Updated: 2025-01-21T15:07:54.481Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Dell Products: PowerEdge Platform Problem Types: CWE-787 Description: Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege. Additional Analyst Notes: - CVE Program Container: - CISA
ading to arbitrary code execution or escalation of privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000213550/dsa-2023-098-security-update-for-dell-poweredge-14g-server-bios-for-an-out-of-bounds-write-vulnerability
CVE ID: CVE-2023-25539 State: PUBLISHED Published: 2023-05-31T04:50:27.879Z Last Updated: 2025-01-09T20:39:14.030Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: NetWorker NVE Problem Types: CWE-94 Description: Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. This is a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell reco
a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell recommends customers to upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability
CVE ID: CVE-2023-25540 State: PUBLISHED Published: 2023-02-28T16:30:31.210Z Last Updated: 2025-03-11T14:08:27.428Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-276 Description: Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability to overwrite arbitrary files causing denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000209895/dell-emc-powerscale-onefs-security-updates-for-multiple-security
CVE ID: CVE-2023-25542 State: PUBLISHED Published: 2023-04-06T06:17:11.024Z Last Updated: 2025-02-10T20:23:05.288Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Trusted Device Client Problem Types: CWE-276 Description: Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000209461/dsa-2023-074