PT-2023-14082 · Nvidia · Nvidia Dgx A100

CVE-2022-42281

·

Publicado

2023-01-13

·

Atualizado

2023-01-20

CVSS v3.1

6.7

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NVIDIA DGX A100 (affected versions not specified)
Description The issue is related to a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write. This could lead to code execution, denial of service, compromised integrity, and information disclosure.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-42281

Produtos afetados

Nvidia Dgx A100