CVE-2023-0207: High severity nvidia sbios vulnerability
Published Apr 22, 2023
·Updated
NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service.
Affected Software
2 affected components
Nvidia SBIOS<0.33
Nvidia DGX-2
Event History
Apr 22, 2023
CVE Published
via MITRE·02:28 AM
Data Sourced
via MITRE·02:28 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-0207.
2
What is the affected software?
The affected software is NVIDIA DGX-2 SBIOS up to version 0.33.
3
What is the severity of CVE-2023-0207?
The severity of CVE-2023-0207 is high (4.4).
4
What is the impact of this vulnerability?
A successful exploit of this vulnerability may lead to denial of service.
5
Is there a fix available for this vulnerability?
For information on how to mitigate this vulnerability, please refer to the following reference: [NVIDIA DGX-2 SBIOS Security Bulletin](https://nvidia.custhelp.com/app/answers/detail/a_id/5449)