CVE-2022-28200: Buffer Overflow
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-28200.
What is the title of the vulnerability?
The title of the vulnerability is NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool where a local user with elevated privileges can read and write beyond intended bounds in SMRAM.
What is the severity of CVE-2022-28200?
The severity of CVE-2022-28200 is high with a severity value of 8.2.
How can the vulnerability be exploited?
The vulnerability can be exploited by a local user with elevated privileges to read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure.
Is there a fix available for CVE-2022-28200?
Yes, it is recommended to update the affected NVIDIA DGX A100 firmware to version 22.5.5 or later to fix the vulnerability.