Security Bulletin: NVIDIA DGX A100 and DGX A800 - June 2023

🗓️ 30 Jun 2023 00:00:00Reported by NvidiaType

NVIDIA released firmware security update for DGX A100 and A800 to address code execution, denial of service, data tampering, privilege escalation, and information disclosure vulnerabilities. Download and install update through NVIDIA Enterprise Support Portal

Reporter	Title	Published	Views	Family All 148
Amd	AMD Client Vulnerabilities – May 2022	10 May 202200:00	–	amd
Amd	AMD Client Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
BDU FSTEC	The vulnerability of the OpenSSL library in the TYCHON network endpoint management tool allows a hacker to execute arbitrary code with SYSTEM privileges.	13 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the API interface of the Redfish microprogramming software for remote control controllers AMI MegaRAC allows a perpetrator to execute arbitrary code.	8 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the AMI MegaRAC Baseboard Management Controller (BMC) allows a intruder to gain full access to the device.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface for microprogrammed control devices in AMI MegaRAC allows a perpetrator to gain unauthorized access to protected information.	9 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the SNP_INIT command during the loading of microprogramming software for AMD processors allows a attacker to influence the integrity of the protected information.	20 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of AMD’s microprogrammed security processor BIOS, related to the execution of operations beyond the buffer in memory, allows attackers to disclose sensitive information that is protected by the system’s security measures.	20 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of AMD Secure Processor’s microprogrammed software, including the System Management Unit (SMU), arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to compromise the integrity of the protected information.	1 Mar 202300:00	–	bdu_fstec

Vulners

Node

nvidia dgx_a100Range<1.21

nvidia dgx_a100Range<00.20.04

30 Jun 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.3 - 9.8

CVSS 27.2

EPSS0.0171

SSVC