Out-of-bounds Write Vulnerability in NVIDIA DGX A100 SBIOS
CVE-2022-42281
6.7MEDIUM
Summary
The NVIDIA DGX A100 has a reported vulnerability in its SBIOS related to the FsRecovery process. This issue could be exploited by a highly privileged local attacker, potentially resulting in an out-of-bounds write. Such an exploit may lead to serious consequences, including unauthorized code execution, denial of service, potential compromise of data integrity, and exposure of sensitive information.
Affected Version(s)
NVIDIA DGX servers All SBIOS firmware versions prior to 1.18
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved