DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5435 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2023-01-12 18:15
Updated : 2023-01-24 08:03
NVD link : CVE-2022-42285
Mitre link : CVE-2022-42285
JSON object : View
CWE
Products Affected
nvidia
- dgx_a100
- sbios