Lucene search
NvidiaCVELIST:CVE-2023-25509HistoryApr 22, 2023 - 2:32 a.m.
CVE-2023-25509
2023-04-2202:32:42
CWE-119
nvidia
www.cve.org
nvidia dgx-1
sbios
vulnerability
code execution
denial of service
escalation of privileges
6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "NVIDIA DGX servers",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All SBIOS prior to S2W_3A13"
}
]
}
]Related
cve
cve
CVE-2023-25509
2023-04-22 03:15:10
prion
prion
Design/Logic Flaw
2023-04-22 03:15:00
nvd
nvd
CVE-2023-25509
2023-04-22 03:15:10
nvidia
nvidia
Security Bulletin: NVIDIA DGX-1 - April 2023
2023-04-19 00:00:00
6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVELIST:CVE-2023-25509