Описание
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
8.2 High
CVSS3
4.6 Medium
CVSS2
Дефекты
Связанные уязвимости
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
Уязвимость компонента SBIOS в BiosCfgTool сервера NVIDIA DGX A100, позволяющая нарушителю выполнить произвольный код, повысить свои привилегии или вызвать отказ в обслуживании
EPSS
8.2 High
CVSS3
4.6 Medium
CVSS2