Skip to content
OpenAdvisories
High · 7.5 CVE-2023-0202 EUVD-2023-12291GHSA-6fqg-j6g5-mh37

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and Lega…

Published Apr 22, 2023 · Updated Feb 4, 2025 · Assigned by nvidia

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All SBIOS versions prior to 1.18 —

References