Lucene search

K
cvelistNvidiaCVELIST:CVE-2023-31032
HistoryJan 12, 2024 - 6:31 p.m.

CVE-2023-31032 CVE

2024-01-1218:31:36
CWE-627
nvidia
www.cve.org
6
nvidia dgx a100
sbios
vulnerability
local access
denial of service

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

9.0%

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DGX A100",
    "vendor": "nvidia",
    "versions": [
      {
        "status": "affected",
        "version": "All SBOIS versions prior to 1.25"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-31032