CVE-2022-31600
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and information disclosure. The scope of impact can extend to other components.
NVIDIA DGX A100 contiene una vulnerabilidad en SBIOS en el SmmCore, donde un usuario con altos privilegios puede encadenar otra vulnerabilidad a esta vulnerabilidad, causando un desbordamiento de enteros, lo que puede conllevar a una ejecución de código, escalada de privilegios, denegación de servicio, integridad comprometida y divulgación de información. El alcance del impacto puede extenderse a otros componentes
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-05-24 CVE Reserved
- 2022-07-04 CVE Published
- 2024-01-25 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5367 | 2022-07-13 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Nvidia Search vendor "Nvidia" | Dgx A100 Firmware Search vendor "Nvidia" for product "Dgx A100 Firmware" | < 22.5.5 Search vendor "Nvidia" for product "Dgx A100 Firmware" and version " < 22.5.5" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Dgx A100 Search vendor "Nvidia" for product "Dgx A100" | - | - |
Safe
|