cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2022-31603,https://securityvulnerability.io/vulnerability/CVE-2022-31603,Improper Validation Vulnerability in NVIDIA DGX A100 SBIOS,"The NVIDIA DGX A100 has a vulnerability within its SBIOS component, specifically affecting the IpSecDxe module. This flaw allows users with elevated privileges to exploit improper validation of an array index. Exploitation of this vulnerability could lead to code execution scenarios, resulting in potential denial of service, risks to data integrity, and unauthorized information disclosure. Organizations utilizing the DGX A100 should be aware of these risks and ensure appropriate security measures are in place. For further information, refer to NVIDIA's support documentation.",Nvidia,Nvidia Dgx A100,6.4,MEDIUM,0.0004400000034365803,false,,false,false,false,,,false,false,,2022-07-04T18:10:36.000Z,0 CVE-2022-31602,https://securityvulnerability.io/vulnerability/CVE-2022-31602,Out-of-Bounds Write Vulnerability in NVIDIA DGX A100,"The NVIDIA DGX A100 features a vulnerability within its System BIOS (SBIOS) in the IpSecDxe module. This flaw permits a user with elevated privileges to exploit a preconditioned heap scenario, resulting in an out-of-bounds write condition. Exploiting this vulnerability could allow unauthorized code execution, lead to denial of service situations, compromise data integrity, and cause potential information disclosure.",Nvidia,Nvidia Dgx A100,6.4,MEDIUM,0.0004400000034365803,false,,false,false,false,,,false,false,,2022-07-04T18:10:31.000Z,0 CVE-2022-31601,https://securityvulnerability.io/vulnerability/CVE-2022-31601,Local Privilege Escalation Vulnerability in NVIDIA DGX A100,"The NVIDIA DGX A100 has a vulnerability in its System BIOS (SBIOS) located within the SmbiosPei module. This flaw permits a highly privileged local attacker to perform an out-of-bounds write. Exploiting this vulnerability could allow the attacker to execute arbitrary code, leading to potential denial of service, compromised system integrity, and unauthorized information disclosure.",Nvidia,Nvidia Dgx A100,6.7,MEDIUM,0.0004199999966658652,false,,false,false,false,,,false,false,,2022-07-04T18:10:27.000Z,0 CVE-2022-31600,https://securityvulnerability.io/vulnerability/CVE-2022-31600,Integer Overflow Vulnerability in NVIDIA DGX A100 Product,"The NVIDIA DGX A100 product is affected by an integer overflow vulnerability within the SBIOS SmmCore. Users with elevated privileges can exploit this vulnerability by chaining it with another security flaw, potentially leading to serious consequences such as code execution, privilege escalation, denial of service, and compromised integrity. Additionally, the impact may extend beyond the initial component, affecting other system components and data integrity.",Nvidia,Nvidia Dgx A100,7.5,HIGH,0.00044999999227002263,false,,false,false,false,,,false,false,,2022-07-04T18:10:19.000Z,0 CVE-2022-31599,https://securityvulnerability.io/vulnerability/CVE-2022-31599,Local Code Execution and Information Disclosure Vulnerability in NVIDIA DGX A100,"NVIDIA DGX A100 is affected by a vulnerability in the System BIOS (SBIOS) related to the Open Firmware Device Tree (Ofbd). This issue allows a local user with elevated privileges to manipulate an uninitialized pointer, potentially leading to unauthorized code execution, privilege escalation, denial of service, and exposure of sensitive information. The impact may extend to other components of the system, thereby amplifying the risk to overall system integrity.",Nvidia,Nvidia Dgx A100,8.2,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2022-07-04T18:10:14.000Z,0 CVE-2022-28200,https://securityvulnerability.io/vulnerability/CVE-2022-28200,Local Code Execution and Privilege Escalation in NVIDIA DGX A100 SBIOS,"The NVIDIA DGX A100 contains a significant vulnerability within its SBIOS, specifically in the BiosCfgTool. This flaw allows a local user with elevated privileges to manipulate memory access beyond intended constraints in the System Management RAM (SMRAM). This exploitation can facilitate unauthorized code execution, lead to privilege escalation, and result in denial of service as well as potential information disclosure. The ramifications of this vulnerability can affect not only the DGX A100 itself but also extend to other interconnected components.",Nvidia,Nvidia Dgx A100,8.2,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2022-07-02T00:20:10.000Z,0