Internal Asset Exposed to Unsafe Debug Access Level or State in Hopper HGX 8-GPU - CVE-2024-0114
Published: March 6, 2025
Vulnerability identifier: #VU105381
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-0114
CWE-ID: CWE-1244
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to internal asset exposed to unsafe debug access level or state in the HGX Management Controller (HMC). A local administrator can execute arbitrary code on the target system.
Affected software
Hopper HGX 8-GPU
How to mitigate CVE-2024-0114
Install updates from vendor's website.
Hopper HGX 8-GPU - update to 1.6.0