CVE-2024-0114 Privilege escalation in NVIDIA Hopper HGX 8-GPU
A malicious actor with BMC admin access can escalate privileges to HMC administrator, enabling code execution and data tampering on NVIDIA HGX systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-0114?
CVE-2024-0114 is a high-severity vulnerability in NVIDIA Hopper HGX 8-GPU, published on 5 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weakness: CWE-1244
Which versions are affected by CVE-2024-0114?
How do I fix CVE-2024-0114?
No fix has been published for CVE-2024-0114 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-0114 being exploited?
There is no known exploitation of CVE-2024-0114 in the wild and no public exploit code.
Sources
Also known as GHSA-qh47-4wjj-cqjj.