Sbios (Nvidia) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-04-22. Vendor: Nvidia.

CVEs of Sbios

• CVE-2023-25509 - CVSS 7.8 (high), 2023-04-22: NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.
• CVE-2023-25506 - CVSS 8.2 (high), 2023-04-22: NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond…
• CVE-2023-0209 - CVSS 8.2 (high), 2023-04-22: NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary…
• CVE-2023-0207 - CVSS 7.5 (high), 2023-04-22: NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful…
• CVE-2022-42286 - CVSS 7.8 (high), 2023-01-13: DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.
• CVE-2022-42285 - CVSS 7.8 (high), 2023-01-13: DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to…