Security Bulletin: NVIDIA DGX Station A100 and DGX Station A800 - February 2024

NVIDIA has released a firmware security update for the NVIDIA DGX™ Station A100 and DGX™ Station A800 systems. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details This section provides a summary of...

CVE-2022-42275

Mode C: Affected product is NVIDIA DGX Station A100/A800 BMC. CVE-2022-42275 concerns the IPMI handler where an unauthenticated host can write to the host SPI flash, bypassing secure boot protections, leading to loss of integrity and potential DoS. Root cause: IPMI/BMC tooling vulnerability allow...