NVIDIA Hopper HGX 8-GPU HMC Privilege Escalation Vulnerability Allowing Unauthorized Access to Management Controller

A vulnerability exists in the HGX Management Controller (HMC) of NVIDIA Hopper HGX for 8-GPU systems. This issue may allow a malicious actor with administrative access on the Baseboard Management Controller (BMC) to gain unauthorized administrative access to the HMC. Exploitation of this vulnerability could result in code execution, denial of service, unauthorized privilege escalation, information disclosure, and data tampering.

Impact

Successful exploitation allows unauthorized administrative access to the HMC, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Remediation

Users are advised to download and install the appropriate firmware update. The updated version is 1.6.0 or later.