780 matches found
PT-2023-14087 · Nvidia · Dgx A100 Sbios
Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue is related to a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. Recommendations: At the moment, there is no...
CVE-2022-42286: Improper Restriction of Operations within the Bounds of a Memory Buffer
DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges...
CVE-2022-42285: Improper Prevention of Lock Bit Modification
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...
NVIDIA DGX 缓冲区错误漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100, which stems from the presence of an out-of-bounds write issue that could lead to code execution, denial of service, compromise of integrity, and information...
PT-2023-14082 · Nvidia · Nvidia Dgx A100
Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 affected versions not specified Description: The issue is related to a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write. This could lead to code...
CVE-2022-42281: Out-of-bounds Write
NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...
CVE-2022-42277: Authentication Bypass Using an Alternate Path or Channel
NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...
NVIDIA DGX 访问控制错误漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX Station. An attacker exploiting this vulnerability could read, write, and erase flash memory, resulting in code execution, privilege escalation, denial of service...
NVIDIA DGX 访问控制错误漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100. An attacker exploiting this vulnerability could read, write, and erase flash memory, resulting in code execution, privilege escalation, denial of service, a...
PT-2023-14077 · Nvidia · Nvidia Dgx A100
Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 affected versions not specified Description: The issue is related to a vulnerability in SBIOS in the SmiFlash component, allowing a local user with elevated privileges to read, write, and erase flash. This may lead to code...
PT-2023-14078 · Nvidia · Nvidia Dgx Station
Name of the Vulnerable Software and Affected Versions: NVIDIA DGX Station affected versions not specified Description: The issue allows a local user with elevated privileges to read, write, and erase flash, potentially leading to code execution, escalation of privileges, denial of service, and...
Security Bulletin: NVIDIA DGX A100 Server and DGX Station A100 - December 2022
NVIDIA has released a firmware security update for NVIDIA DGX A100 server and NVIDIA DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering. To protect your...
The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmmCore allows a hacker to execute arbitrary code, cause system failures, and compromise the confidentiality and integrity of protected information.
The vulnerability of the SBIOS component in NVIDIA’s SmmCore server NVIDIA DGX A100 is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, and compromise the confidentiality and integrity of the protected informati...
The vulnerability of the SBIOS component in NVIDIA’s DGX A100 IpSecDxe server allows a attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information.
The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s IpSecDxe stack arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or compromise the integrity of the protected information...
The vulnerability of the SBIOS component in NVIDIA’s DGX A100 IpSecDxe server allows a attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information.
The vulnerability of the SBIOS component in the NVIDIA DGX A100 IpSecDxe server is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information...
The vulnerability of the SBIOS component in NVIDIA’s DGX A100 server allows a hacker to execute arbitrary code, cause system failures, or compromise the confidentiality of protected information.
The vulnerability of the SBIOS component in NVIDIA’s Ofbd server NVIDIA DGX A100 is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code, cause service failures, or compromise the confidentiality of protected...
The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei architecture allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei firmware is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...
CVE-2022-31603
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information...
CVE-2022-31602
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure...
CVE-2022-31600
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and...