NVIDIA DGX H100 BMC

Name: NVIDIA DGX H100 BMC
Brand: NVIDIA

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

6critical9high0medium0low

updated 2026-10-27

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-25528US	critical9.8	0.87% (59th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25530US	critical9.8	0.83% (57th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25533US	critical9.8	0.78% (56th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31009US	critical9.8	0.71% (53rd)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31010US	high8.8	0.69% (53rd)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31013US	high8.8	0.64% (50th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31012US	high8.8	0.64% (50th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25529US	high8.1	0.63% (50th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31011US	high8.8	0.57% (47th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25534US	critical9.8	0.56% (46th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25532US	high7.5	0.56% (46th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25531US	critical9.8	0.48% (41st)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31008US	high7.8	0.21% (10th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-25527US	high7.8	0.20% (10th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07
CVE-2023-31015US	high7.8	0.19% (9th)	—	no fix	2023-09-20	≤ All versions prior to 23.08.07

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-208Observable Timing Discrepancy1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.