CVE-2023-31037 (published 2024-01-24T02:12:30.123Z)

NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.


Affected products: Vendor: NVIDIA
Product: Bluefield 2 DPU BMC, BlueField 3 DPU BMC
Versions: LTS:2.8.2-46, 23.04, 23.07, 23.09