Skip to content
OpenAdvisories
High · 7.5 CVE-2023-0207 EUVD-2023-12296GHSA-3g8h-g6g7-3hpr

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged …

Published Apr 22, 2023 · Updated Feb 4, 2025 · Assigned by nvidia

Description

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All SBIOS versions prior to 0.33 —

References