NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVE ID: CVE-2024-0114
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Vendor: NVIDIA
Product: NVIDIA Hopper HGX 8-GPU
EPSS Score: 0.01% (probability of being exploited)
EPSS Percentile: 1.02% (scored less or equal to compared to others)
EPSS Date: 2025-04-02 (when was this score calculated)