Skip to content
OpenAdvisories
High · 7.5 CVE-2023-31035 EUVD-2023-35372GHSA-2jcf-hjwv-mmmw

CVE

Published Jan 12, 2024 · Updated Aug 30, 2024 · Assigned by nvidia

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Affected products

VendorProductAffectedFixed
nvidia DGX A100 All SBOIS versions prior to 1.25 —

References