Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering.

Published

2023-01-13T02:15:08.690

Last Modified

2024-11-21T07:24:40.320

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.0 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-1231
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia sbios < 1.18 Yes
Hardware nvidia dgx_a100 - No
References