CVE
CVE-2023-31032

7.5HIGH

Key Information:

Vendor

Nvidia
Status
Dgx A100
Vendor
CVE Published:
12 January 2024

What is CVE-2023-31032?

The NVIDIA DGX A100 SBIOS is vulnerable due to an issue where an attacker with local access can invoke a dynamic variable evaluation. This vulnerability can be exploited to cause a denial of service, disrupting the operation of the affected product. Users and organizations utilizing the DGX A100 system should be aware of this issue and take appropriate measures to mitigate any potential risks.

Affected Version(s)

DGX A100 All SBOIS versions prior to 1.25

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5510

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.