[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhwWni5FfvJHLBpj6O1YRjGwqtPzZU-sm663_yo2H00k":3,"g5a-risk:CVE-2020-11487":142},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":138,"notableEvents":139},"CVE-2020-11487","What is CVE-2020-11487?","NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerability in the AMI BMC firmware in which the use of a hard-coded RSA 1024 key with weak ciphers may lead to information disclosure.","NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BM...","2020-10-29T04:15:11.467","2020-11-12T14:41:50.137",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01274,[39,39,39,39,39,39,39],"High",[43,48,53,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"intel","bmc_firmware","*","cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"nvidia","dgx-1","-","cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"dgx-2","cpe:2.3:h:nvidia:dgx-2:-:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"dgx_a100","cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*",4,[61],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5010","Custhelp",[65],"Vendor Advisory",1,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2020-11487? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-11487, a high severity cyber security vulnerability from 2020. NVIDIA DGX servers, DGX-1 with BMC firmware versions prior ...","CVE-2020-11487, CVE-2020-11487 vulnerability, CVE-2020-11487 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, intel security, nvidia security, bmc_firmware vulnerability, dgx-1 vulnerability, dgx-2 vulnerability, dgx_a100 vulnerability","\u002Fwhat-is\u002Fcve-2020-11487",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-11487","Cybersecurity","CVE-2020-11487, CVE-2020-11487 vulnerability, CVE-2020-11487 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104,117,128],{"Operator":105,"Negate":26,"Nodes":106},"AND",[107,113],{"Operator":108,"Negate":26,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":112,"VersionEndIncluding":26},"B2270B8F-DF8A-4137-B7B2-22810CD06E8F","3.38.30",{"Operator":108,"Negate":26,"CPEMatch":114},[115],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6B88743-AF2B-4EB6-B991-85D58C654678",{"Operator":105,"Negate":26,"Nodes":118},[119,124],{"Operator":108,"Negate":26,"CPEMatch":120},[121],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":123,"VersionEndIncluding":26},"BEACAC43-F56A-4A51-AF25-D9748754A08F","1.06.06",{"Operator":108,"Negate":26,"CPEMatch":125},[126],{"Vulnerable":26,"Criteria":55,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2578180E-CD9E-4D45-B092-CEFDC3653878",{"Operator":105,"Negate":26,"Nodes":129},[130,134],{"Operator":108,"Negate":26,"CPEMatch":131},[132],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"14DF8051-DAEB-4824-81CD-7C6E1E064FE9",{"Operator":108,"Negate":26,"CPEMatch":135},[136],{"Vulnerable":26,"Criteria":58,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8807CB65-5F49-42E8-B5D8-36943418ADB9",[],[],{"lastModified":11,"cacheTime":141,"version":32},1792248547992,{"score":143,"band":144,"action":145,"scoredAt":146},47,"Medium","Plan remediation","2026-10-16T06:49:46.724361+00:00"]