[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flvZGV6wXCiW8G-3DmPBGAGemQj4Oa_MAIy7MV01XzQo":3,"g5a-risk:CVE-2020-11489":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":63,"weaknesses":64,"weaknessesCount":63,"isActivelyExploited":73,"cisaInfo":26,"otxData":26,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":125,"notableEvents":126},"CVE-2020-11489","What is CVE-2020-11489?","NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure.","NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability ...","2020-10-29T04:15:11.703","2021-07-21T11:39:23.747",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01332,[39,39,39,39,39,39,39],"High",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"intel","bmc_firmware","*","cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"nvidia","dgx-1","-","cpe:2.3:h:nvidia:dgx-1:-:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"dgx-2","cpe:2.3:h:nvidia:dgx-2:-:*:*:*:*:*:*:*",3,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5010","Custhelp",[62],"Vendor Advisory",1,[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.","Developers often choose default values that leave the product as open and easy to use as possible out-of-the-box, under the assumption that the administrator can (or should) change the default value.  However, this ease-of-use comes at a cost when the default is insecure and the administrator does not change it.","Incomplete","Base","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2020-11489? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-11489, a high severity cyber security vulnerability from 2020. NVIDIA DGX servers, all DGX-1 with BMC firmware versions pr...","CVE-2020-11489, CVE-2020-11489 vulnerability, CVE-2020-11489 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, intel security, nvidia security, bmc_firmware vulnerability, dgx-1 vulnerability, dgx-2 vulnerability","\u002Fwhat-is\u002Fcve-2020-11489",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-11489","Cybersecurity","CVE-2020-11489, CVE-2020-11489 vulnerability, CVE-2020-11489 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101,114],{"Operator":102,"Negate":26,"Nodes":103},"AND",[104,110],{"Operator":105,"Negate":26,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":109,"VersionEndIncluding":26},"B2270B8F-DF8A-4137-B7B2-22810CD06E8F","3.38.30",{"Operator":105,"Negate":26,"CPEMatch":111},[112],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6B88743-AF2B-4EB6-B991-85D58C654678",{"Operator":102,"Negate":26,"Nodes":115},[116,121],{"Operator":105,"Negate":26,"CPEMatch":117},[118],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":120,"VersionEndIncluding":26},"BEACAC43-F56A-4A51-AF25-D9748754A08F","1.06.06",{"Operator":105,"Negate":26,"CPEMatch":122},[123],{"Vulnerable":26,"Criteria":55,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2578180E-CD9E-4D45-B092-CEFDC3653878",[],[],{"lastModified":11,"cacheTime":128,"version":32},1792248547932,{"score":130,"band":131,"action":132,"scoredAt":133},47,"Medium","Plan remediation","2026-10-16T06:49:46.724844+00:00"]