Improper Validation Vulnerability in NVIDIA DGX A100 SBIOS

CVE-2022-31603

What is CVE-2022-31603?

The NVIDIA DGX A100 has a vulnerability within its SBIOS component, specifically affecting the IpSecDxe module. This flaw allows users with elevated privileges to exploit improper validation of an array index. Exploitation of this vulnerability could lead to code execution scenarios, resulting in potential denial of service, risks to data integrity, and unauthorized information disclosure. Organizations utilizing the DGX A100 should be aware of these risks and ensure appropriate security measures are in place. For further information, refer to NVIDIA's support documentation.

References