NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2022-07-02T00:20:10

Updated: 2024-08-03T05:48:37.214Z

Reserved: 2022-03-30T00:00:00

Link: CVE-2022-28200

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-07-02T01:15:07.190

Modified: 2022-07-12T22:09:31.877

Link: CVE-2022-28200

cve-icon Redhat

No data.