Описание
NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.21 (исключая)
Одновременно
cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:sbios:*:*:*
cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*
Конфигурация 2Версия до 1.21 (исключая)
Одновременно
cpe:2.3:o:nvidia:dgx_a800_firmware:*:*:*:*:sbios:*:*:*
cpe:2.3:h:nvidia:dgx_a800:-:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00029
Низкий
7.5 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-20
CWE-20
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.
EPSS
Процентиль: 8%
0.00029
Низкий
7.5 High
CVSS3
7.8 High
CVSS3
Дефекты
CWE-20
CWE-20