The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei architecture allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei firmware is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

CVE-2022-31602

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure...

CVE-2022-31599

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to oth...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

NVIDIA DGX 缓冲区错误漏洞

The Nvidia NVIDIA DGX is a high-performance workstation for deep learning applications from Nvidia, USA. A buffer error vulnerability exists in NVIDIA DGX A100 Servers prior to version 22.5.5, which stems from a boundary error when handling untrusted input in SBIOS in BiosCfgTool, and is exploite...

Information disclosure

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

CVE-2022-23930

According to connected documentation, CVE-2022-23930 concerns HP BIOS/firmware on enterprise HP PC devices, involving a memory corruption issue in System Management Mode (SMM). The vulnerability is described as a stack-based buffer overflow in SMM that can enable arbitrary code execution with the...

CVE-2022-23928: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

CVE-2022-23931: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

PT-2022-16349

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may lead to Escalation of Privilege, Arbitrary Code Execution,...

PT-2022-16345

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may allow for Escalation of Privilege, Arbitrary Code Execution,...

PT-2022-16344

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may allow Escalation of Privilege, Arbitrary Code Execution, Unauthoriz...

CVE-2022-23932: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

CVE-2022-23933: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

CVE-2022-23929: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...

PT-2022-16343

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may lead to Escalation of Privilege, Arbitrary Code Execution,...

PT-2022-16350

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may allow for Escalation of Privilege, Arbitrary Code Execution,...

PT-2022-16342

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may lead to Escalation of Privilege, Arbitrary Code Execution,...

PT-2022-16347 · Hewlett Packard · Hp Pc

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue concerns potential vulnerabilities in the system BIOS of certain HP PC products. These vulnerabilities may allow escalation of privilege, arbitrary code execution,...

CVE-2022-23924: Undefined Security Weakness

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure...