← CVE Intelligence

CVE-2022-42281

NVIDIA / NVIDIA DGX servers PUBLISHED

Description (CNA)

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.

Affected (CNA)

Vendor / productVersions
NVIDIA / NVIDIA DGX serversaffected All SBIOS firmware versions prior to 1.18

CWE

CWE-787

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.