NVIDIA NVIDIA DGX Servers

Name: NVIDIA NVIDIA DGX Servers
Brand: NVIDIA

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical29high9medium0low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11486US	critical9.8	2.72% (86th)	—	no fix	2020-10-29	≤ All DGX-1 Servers with BMC firmware versions prior to 3.38.30
CVE-2020-11483US	critical9.8OT elevated	1.38% (72nd)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06
CVE-2020-11616US	high7.5	1.33% (71st)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30
CVE-2020-11489US	high7.5OT elevated	1.33% (71st)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06
CVE-2020-11487US	high7.5OT elevated	1.27% (70th)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30, all DGX-2 with BMC firmware versions prior to 1.06.06, all DGX A100 with all BMC firmware version.
CVE-2020-11615US	high7.5OT elevated	1.26% (70th)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30
CVE-2022-42279US	high8.8	1.12% (66th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2020-11484US	medium4.9OT elevated	1.09% (65th)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30
CVE-2022-42290US	high8.8	1.06% (64th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42289US	high8.8	1.06% (64th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42273US	high8.8	0.90% (59th)	—	no fix	2023-01-12	≤ All BMC firmware versions prior to 00.19.07
CVE-2023-25507US	high8.8	0.86% (58th)	—	no fix	2023-04-22	≤ All BMC versions prior to 3.39.3
CVE-2022-42272US	high8.8	0.82% (57th)	—	no fix	2023-01-12	≤ All BMC firmware versions prior to 00.19.07
CVE-2020-11485US	high8.8	0.78% (56th)	—	no fix	2020-10-29	≤ All DGX-1 Servers with BMC firmware versions prior to 3.38.30
CVE-2022-42278US	high7.8	0.60% (48th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42282US	medium5.5	0.50% (42nd)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42288US	medium5.3	0.47% (41st)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42280US	high7.8	0.27% (19th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42271US	high7.8	0.27% (19th)	—	no fix	2023-01-11	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42274US	high7.8	0.27% (19th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2020-11488US	medium6.7	0.25% (17th)	—	no fix	2020-10-29	≤ All DGX-1 with BMC firmware versions prior to 3.38.30, and all DGX-2 with BMC firmware versions prior to 1.06.06
CVE-2022-42281US	medium6.7	0.24% (15th)	—	no fix	2023-01-13	≤ All SBIOS firmware versions prior to 1.18
CVE-2023-25508US	high7.8	0.24% (15th)	—	no fix	2023-04-22	≤ All BMC versions prior to 3.39.3
CVE-2022-42287US	high7.8	0.23% (13th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2022-42283US	high7.8	0.22% (13th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2023-25505US	high7.8	0.21% (12th)	—	no fix	2023-04-22	≤ All BMC versions prior to 3.39.3
CVE-2023-0201US	medium6.7	0.20% (10th)	—	no fix	2023-04-22	≤ All BMC versions prior to 1.08.00
CVE-2022-42275US	high7.1OT elevated	0.20% (10th)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07
CVE-2023-0209US	high7.8	0.20% (10th)	—	no fix	2023-04-22	≤ All SBIOS prior to S2W_3A13
CVE-2022-42286US	high7.8	0.19% (9th)	—	no fix	2023-01-13	≤ All SBIOS firmware versions prior to 1.18
CVE-2023-25509US	high7.8	0.19% (9th)	—	no fix	2023-04-22	≤ All SBIOS prior to S2W_3A13
CVE-2022-42277US	high8.2OT elevated	0.19% (9th)	—	no fix	2023-01-13	≤ All SBIOS firmware versions prior to 10.16
CVE-2022-42276US	high8.2OT elevated	0.19% (9th)	—	no fix	2023-01-13	≤ All SBIOS firmware versions prior to 1.18
CVE-2023-25506US	high8.2	0.18% (7th)	—	no fix	2023-04-22	≤ All SBIOS prior to S2W_3A13
CVE-2023-0200US	medium6.7	0.17% (6th)	—	no fix	2023-04-22	≤ All BMC versions prior to 1.08.00
CVE-2023-0206US	high7.8	0.16% (5th)	—	no fix	2023-04-22	≤ All SBIOS versions prior to 1.18
CVE-2023-0202US	high7.8	0.16% (5th)	—	no fix	2023-04-22	≤ All SBIOS versions prior to 1.18
CVE-2022-42285US	high7.8	0.16% (5th)	—	no fix	2023-01-13	≤ All SBIOS firmware versions prior to 1.18
CVE-2023-0207US	medium4.4	0.15% (4th)	—	no fix	2023-04-22	≤ All SBIOS versions prior to 0.33
CVE-2022-42284US	medium5.5OT elevated	0.13% (3rd)	—	no fix	2023-01-13	≤ All BMC firmware versions prior to 00.19.07

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel3 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-798Use of Hard-coded Credentials3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan