Vulnerability Details CVE-2022-31599
NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.0%
CVSS Severity
CVSS v3 Score 8.2
CVSS v2 Score 4.6
References
Products affected by CVE-2022-31599
-
cpe:2.3:h:nvidia:dgx_a100:-
-
cpe:2.3:o:nvidia:dgx_a100_firmware:-
-
cpe:2.3:o:nvidia:dgx_a100_firmware:00.19.07
-
cpe:2.3:o:nvidia:dgx_a100_firmware:00.22.05
-
cpe:2.3:o:nvidia:dgx_a100_firmware:1.18
-
cpe:2.3:o:nvidia:dgx_a100_firmware:1.25
-
cpe:2.3:o:nvidia:dgx_a100_firmware:1.8