[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuuuzDSwYkb8cA2qpI-IyR7g5t703topXQz0PQA52aVs":3,"g5a-risk:CVE-2023-31029":125},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":29,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":57,"references":58,"referencesCount":57,"weaknesses":66,"weaknessesCount":57,"isActivelyExploited":56,"cisaInfo":29,"otxData":29,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":120,"notableEvents":121},"CVE-2023-31029","What is CVE-2023-31029?","NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.","NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack ov...","2024-01-12T19:15:09.847","2026-06-17T05:56:07.43",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":40,"CVSSMetricV2":41,"CVSSMetricV40":42},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@nvidia.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","LOCAL","LOW","NONE","CHANGED","HIGH",9.3,"CRITICAL",null,2.5,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":38,"ImpactScore":39},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":36,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":37,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NETWORK","UNCHANGED",3.9,5.9,[],[],[],0.00635,[43,43,43,43,43,43,43],"Critical",[47,52],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"nvidia","dgx_a100_firmware","*","cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:bmc:*:*:*",{"vendor":48,"product":53,"version":54,"criteria":55,"vulnerable":56},"dgx_a100","-","cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*",false,2,[59,64],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5510","Custhelp",[63],"Vendor Advisory",{"url":60,"source":61,"tags":65},[63],[67,75],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":76,"name":77,"description":78,"extendedDescription":71,"status":72,"abstraction":79,"structure":74},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2023-31029? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-31029, a critical severity cyber security vulnerability from 2024. NVIDIA DGX A100 baseboard management controller (BMC) c...","CVE-2023-31029, CVE-2023-31029 vulnerability, CVE-2023-31029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, nvidia security, dgx_a100_firmware vulnerability, dgx_a100 vulnerability","\u002Fwhat-is\u002Fcve-2023-31029",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-31029","Cybersecurity","CVE-2023-31029, CVE-2023-31029 vulnerability, CVE-2023-31029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":29,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":56,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":115,"VersionEndIncluding":29},"866DDFEC-0CB8-4152-B36E-A358497AA4D0","00.22.05",{"Operator":111,"Negate":56,"CPEMatch":117},[118],{"Vulnerable":56,"Criteria":55,"MatchCriteriaID":119,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"8807CB65-5F49-42E8-B5D8-36943418ADB9",[],[],{"lastModified":11,"cacheTime":123,"version":124},1792249107677,"2.0",{"score":126,"band":127,"action":128,"scoredAt":129},55,"Medium","Plan remediation","2026-10-16T07:00:28.494713+00:00"]