CVE-2023-0202

published 2023-04-22

CVE-2023-0202: NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	dgx_a100_firmware	< 1.18	1.18
nvidia	nvidia_dgx_servers	—	—

CWE-119