Nvidia
Nvidia DGX A100 Firmware: vulnerabilidades y CVE
Nvidia DGX A100 Firmware tiene 28 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE28
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-31035 | Alta (7.8) | 0.18% | — | 12 ene 2024 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead… |
| CVE-2023-31034 | Alta (7.8) | 0.15% | — | 12 ene 2024 | NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of… |
| CVE-2023-31033 | Alta (8) | 0.30% | — | 12 ene 2024 | NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of… |
| CVE-2023-31032 | Media (5.5) | 0.16% | — | 12 ene 2024 | NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service. |
| CVE-2023-31031 | Alta (7.8) | 0.19% | — | 12 ene 2024 | NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution,… |
| CVE-2023-31030 | Crítica (9.8) | 0.60% | — | 12 ene 2024 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability… |
| CVE-2023-31029 | Crítica (9.8) | 0.64% | — | 12 ene 2024 | NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A… |
| CVE-2023-31025 | Alta (7.5) | 0.49% | — | 12 ene 2024 | NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure. |
| CVE-2023-31024 | Crítica (9.8) | 0.64% | — | 12 ene 2024 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this… |
| CVE-2023-25522 | Alta (7.8) | 0.17% | — | 4 jul 2023 | NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may… |
| CVE-2023-25521 | Alta (7.8) | 0.15% | — | 4 jul 2023 | NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful… |
| CVE-2023-0206 | Alta (7.8) | 0.16% | — | 22 abr 2023 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation… |
| CVE-2023-0202 | Alta (7.8) | 0.16% | — | 22 abr 2023 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to… |
| CVE-2022-42290 | Alta (8.8) | 1.0% | — | 13 ene 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. |
| CVE-2022-42289 | Alta (8.8) | 1.0% | — | 13 ene 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. |
| CVE-2022-42288 | Media (5.3) | 0.46% | — | 13 ene 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure. |
| CVE-2022-42281 | Media (6.7) | 0.23% | — | 13 ene 2023 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised… |
| CVE-2022-42279 | Alta (8.8) | 1.1% | — | 13 ene 2023 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. |
| CVE-2022-42276 | Alta (8.2) | 0.18% | — | 13 ene 2023 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of… |
| CVE-2022-42273 | Alta (8.8) | 0.85% | — | 12 ene 2023 | NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution. |
| CVE-2022-42272 | Alta (8.8) | 0.77% | — | 12 ene 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges. |
| CVE-2022-42271 | Alta (7.8) | 0.25% | — | 11 ene 2023 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution |
| CVE-2022-31603 | Media (6.7) | 0.21% | — | 4 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution,… |
| CVE-2022-31602 | Media (6.7) | 0.21% | — | 4 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution,… |
| CVE-2022-31601 | Media (6.7) | 0.24% | — | 4 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised… |
| CVE-2022-31600 | Alta (8.2) | 0.21% | — | 4 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution,… |
| CVE-2022-31599 | Alta (8.2) | 0.24% | — | 4 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial… |
| CVE-2022-28200 | Alta (8.2) | 0.24% | — | 2 jul 2022 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of… |