Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0209
HistoryApr 22, 2023 - 3:15 a.m.

Design/Logic Flaw

2023-04-2203:15:00
PRIOn knowledge base
www.prio-n.com
4
nvidia
dgx-1
sbios
uncore pei
vulnerability
authentication
code execution
denial of service
escalation of privileges
firmware implant
information disclosure
data tampering
secureboot bypass

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware implant, data tampering, and SecureBoot bypass.

CPENameOperatorVersion
sbioseq< 52w-3a13

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

Related for PRION:CVE-2023-0209