CVE-2020-11485
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request, which can lead to information disclosure or code execution.
Los servidores NVIDIA DGX, todos DGX-1 con versiones de firmware BMC anteriores a 3.38.30, contienen una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en el firmware AMI BMC en la que la aplicación web no comprueba suficientemente si una petición coherente, válida y bien formada fue proporcionada intencionalmente por el usuario, lo que puede conllevar a una divulgación de información o a una ejecución de código
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-04-02 CVE Reserved
- 2020-10-29 CVE Published
- 2024-03-03 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5010 | 2020-11-05 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Bmc Firmware Search vendor "Intel" for product "Bmc Firmware" | < 3.38.30 Search vendor "Intel" for product "Bmc Firmware" and version " < 3.38.30" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Dgx-1 Search vendor "Nvidia" for product "Dgx-1" | - | - |
Safe
|