Vulnerability in DGX-2 SBIOS by NVIDIA allows privilege escalation and potential code execution

CVE-2023-0201

What is CVE-2023-0201?

A security issue in the NVIDIA DGX-2 SBIOS allows a user with elevated privileges to execute a write operation beyond the designated memory limits of an indexable resource. This could lead to severe consequences including code execution, denial of service, compromised system integrity, and unauthorized information access, thereby exposing critical system functions to potential exploitation.

References