CVE-2022-31601: Medium severity nvidia dgx station a100 firmware vulnerability
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-31601?
CVE-2022-31601 is a vulnerability found in NVIDIA DGX A100's SBIOS in the SmbiosPei component that could allow a highly privileged local attacker to perform an out-of-bounds write, potentially leading to code execution, denial of service, compromised integrity, and information disclosure.
How does CVE-2022-31601 affect NVIDIA DGX A100?
CVE-2022-31601 affects NVIDIA DGX A100 by exploiting a vulnerability in its SBIOS in the SmbiosPei component, enabling a highly privileged local attacker to cause an out-of-bounds write, which can result in code execution, denial of service, compromised integrity, and information disclosure.
What is the severity of CVE-2022-31601?
The severity of CVE-2022-31601 is medium, with a CVSS score of 6.7.
How can I fix the CVE-2022-31601 vulnerability?
To fix the CVE-2022-31601 vulnerability, it is recommended to update NVIDIA DGX A100 firmware to version 22.5.5 or higher. Please refer to the official NVIDIA advisory for more information.
Is NVIDIA DGX A100 vulnerable to CVE-2022-31601?
No, NVIDIA DGX A100 is not vulnerable to CVE-2022-31601.