CVE-2022-31599

CWE-8243 documents3 sources
Severity
8.2HIGH
EPSS
0.1%
top 81.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia DGX A100 FirmwareNvidia Nvidia DGX A100
Timeline
PublishedJul 4
Latest updateJul 5

Description

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5nvidia/nvidia_dgx_a100Versions prior to 22.5.5

🔴Vulnerability Details

2
GHSA
GHSA-pcc9-2xg6-cr43: NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointe↗2022-07-05
▶
CVEList
CVE-2022-31599: NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointe↗2022-07-04
▶