Misconfiguration and Insecure Design

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmwar…CVE-2020-11489NVIDIA · 1.3% likely

   CWE-1188

2. NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by…CVE-2024-0101NVIDIA · CVSS 7.5 · 0.5% likely

   CWE-693

3. NVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service…CVE-2017-6261NVIDIA · CVSS 8.2 · 0.4% likely

   CWE-693

4. NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure…CVE-2026-24148NVIDIA · CVSS 8.3 · 0.4% likely

   CWE-1188

5. NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untr…CVE-2024-0148NVIDIA · CVSS 7.6 · 0.3% likely

   CWE-447

6. NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacke…CVE-2026-47624NVIDIA · CVSS 6 · 0.2% likely

   CWE-693

7. NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing…CVE-2026-24197NVIDIA · CVSS 6.5 · 0.2% likely

   CWE-1188

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.