Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-42281 EUVD-2022-45356GHSA-99h9-9vj2-h3ch

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-…

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Description

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All SBIOS firmware versions prior to 1.18 —

References