CVE-2022-31603mediumCWE-129

CVE-2022-31603: medium-severity vulnerability in NVIDIA DGX A100

Published · Updated

Follow this CVE+ Monitor DGX A100

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.2%
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information disclosure.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
NVIDIA · NVIDIA DGX A100
Related CVEs — NVIDIA DGX A100

In the same product, most dangerous first.

CVE-2022-31601MEDIUMCVE-2022-31601EPSS 0.2%CVE-2022-31599HIGHCVE-2022-31599EPSS 0.2%CVE-2022-28200HIGHCVE-2022-28200EPSS 0.2%CVE-2022-31600HIGHCVE-2022-31600EPSS 0.2%CVE-2022-31602MEDIUMCVE-2022-31602EPSS 0.2%