ID CVE-2022-31601
Summary NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
References
Vulnerable Configurations
  • cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*
    cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 13-07-2022 - 14:04)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
Last major update 13-07-2022 - 14:04
Published 04-07-2022 - 18:15
Last modified 13-07-2022 - 14:04
Back to Top