Skip to content
OpenAdvisories
High · 7.5 CVE-2023-0206 EUVD-2023-12295GHSA-gh64-fxhm-p67h

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A suc…

Published Apr 22, 2023 · Updated Feb 4, 2025 · Assigned by nvidia

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All SBIOS versions prior to 1.18 —

References