DA
Product
Dgx A100 Firmware
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 19Medium 6Low 0
Watch
Add Dgx A100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31030 | 9.8 | Jan 12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet Affected: before 00.22.05 |
| CVE-2023-31029 | 9.8 | Jan 12 | NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a… Affected: before 00.22.05 |
| CVE-2023-31024 | 9.8 | Jan 12 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network… Affected: before 00.22.05 |
| CVE-2022-42290 | 8.8 | Jan 13 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service,… Affected: before 00.19.07 |
| CVE-2022-42289 | 8.8 | Jan 13 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service,… Affected: before 00.19.07 |
| CVE-2022-42279 | 8.8 | Jan 13 | NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service,… Affected: before 00.19.07 |
| CVE-2022-42273 | 8.8 | Jan 12 | NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution Affected: before 00.19.07 |
| CVE-2022-42272 | 8.8 | Jan 12 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of… Affected: before 00.19.07 |
| CVE-2022-42276 | 8.2 | Jan 13 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution,… Affected: before 1.18 |
| CVE-2022-31600 | 8.2 | Jul 4 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer… Affected: before 22.5.5 |
| CVE-2022-31599 | 8.2 | Jul 4 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code… Affected: before 22.5.5 |
| CVE-2022-28200 | 8.2 | Jul 2 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may… Affected: before 22.5.5 |
| CVE-2023-31033 | 8.0 | Jan 12 | NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network Affected: before 00.22.05 |
| CVE-2023-31035 | 7.8 | Jan 12 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level Affected: before 1.25 |
| CVE-2023-31034 | 7.8 | Jan 12 | NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow Affected: before 1.25 |
| CVE-2023-31031 | 7.8 | Jan 12 | NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access Affected: before 1.25 |
| CVE-2023-25522 | 7.8 | Jul 4 | NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format Affected: before 1.21 |
| CVE-2023-25521 | 7.8 | Jul 4 | NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter… Affected: before 1.21 |
| CVE-2023-0206 | 7.8 | Apr 22 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API Affected: before 1.18 |
| CVE-2023-0202 | 7.8 | Apr 22 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs Affected: before 1.18 |
| CVE-2022-42271 | 7.8 | Jan 11 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution Affected: before 00.19.07 |
| CVE-2023-31025 | 7.5 | Jan 12 | NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection Affected: before 00.22.05 |
| CVE-2022-42281 | 6.7 | Jan 13 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code… Affected: before 1.18 |
| CVE-2022-31603 | 6.7 | Jul 4 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an… Affected: before 22.5.5 |
| CVE-2022-31602 | 6.7 | Jul 4 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write… Affected: before 22.5.5 |
| CVE-2022-31601 | 6.7 | Jul 4 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code… Affected: before 22.5.5 |
| CVE-2023-31032 | 5.5 | Jan 12 | NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access Affected: before 1.25 |
| CVE-2022-42288 | 5.3 | Jan 13 | NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information… Affected: before 00.19.07 |
Showing 28