Vulnerabilities > Nvidia
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-22 | CVE-2023-0205 | Unspecified vulnerability in Nvidia Connectx Firmware NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service. | 7.7 |
| 2023-04-22 | CVE-2023-0206 | Unspecified vulnerability in Nvidia DGX A100 Firmware 1.8 NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. | 7.8 |
| 2023-04-22 | CVE-2023-0207 | Incorrect Permission Assignment for Critical Resource vulnerability in Nvidia Sbios NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. | 4.4 |
| 2023-04-22 | CVE-2023-0209 | Improper Authentication vulnerability in Nvidia Sbios NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware implant, data tampering, and SecureBoot bypass. | 7.8 |
| 2023-04-22 | CVE-2023-25505 | Classic Buffer Overflow vulnerability in Nvidia BMC NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution. | 7.8 |
| 2023-04-22 | CVE-2023-25506 | Out-of-bounds Write vulnerability in Nvidia Sbios NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. | 8.2 |
| 2023-04-22 | CVE-2023-25507 | OS Command Injection vulnerability in Nvidia BMC NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering. | 8.8 |
| 2023-04-22 | CVE-2023-25508 | Path Traversal vulnerability in Nvidia BMC NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tampering. | 7.8 |
| 2023-04-22 | CVE-2023-25509 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia Sbios NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. | 7.8 |
| 2023-04-22 | CVE-2023-25510 | NULL Pointer Dereference vulnerability in Nvidia Cuda Toolkit NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service. | 3.3 |