CVE-2023-0207

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@nvidia.com

Published

2023-04-22

Last modified

2025-02-04

Weaknesses

CWE-732

Affected products

• Nvidia Dgx Servers (Nvidia)
• Sbios (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5449