Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0201


NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.


Published

2023-04-22T03:15:09.130

Last Modified

2024-11-21T07:36:44.343

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-118
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia bmc < 1.08.00 Yes
Hardware nvidia dgx-2 - No

References