CVE-2023-31034

CVE-2023-31034 affects NVIDIA DGX Station A100/DGX Station A800 SBIOS as reported across multiple sources including Red Hat and NVIDIA bulletins. The issue is an integer overflow that allows a local attacker to bypass input validation checks, with potential impact including denial of service, inf...

CVE-2023-31034 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31035

CVE-2023-31035 concerns the NVIDIA DGX A100 SBIOS. The vulnerability is a vulnerability in the SBIOS causing an SMI callout that could enable arbitrary code execution at the System Management Mode (SMM) level when triggered. The potential impacts listed are code execution, denial of service, priv...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31032

CVE-2023-31032 affects NVIDIA DGX A100 SBIOS. Root cause: local access may trigger dynamic variable evaluation, leading to a denial of service. Affected SBIOS versions are prior to 10.20. Remediation: upgrade SBIOS firmware to 10.20 or later (DGX Servers: DGX Station A100/DGX Station A800 SBIOS)....

CVE-2023-31032 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

Design/Logic Flaw

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

Input validation

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

CVE-2023-25522 affects NVIDIA DGX A100/A800 SBIOS prior to version 1.21. The issue: improper input validation when configuration information is provided in an unexpected format, which may allow an attacker with local access to cause denial of service, information disclosure, and data tampering. N...

CVE-2023-25521

CVE-2023-25521 affects NVIDIA DGX A100/A800 SBIOS. Root cause: improper input parameter validation in SBIOS, enabling execution with elevated privileges. Impacts: code execution, privilege escalation, denial of service, information disclosure, and data tampering. Remediation: update SBIOS to firm...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

PT-2023-20134 · Nvidia · Nvidia Dgx A100 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100/A800 affected versions not specified Description: The issue is related to a weakness in SBIOS where proper input parameter validation is not performed, allowing an attacker to execute with unnecessary privileges. This can lead...