CVE-2022-42277 — HIGH (7.5)

Q: How severe is CVE-2022-42277?

CVE-2022-42277 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-42277?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Dgx Station A100 Firmware, Nvidia Dgx Station A100.

Vulnerability Description

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Nvidia	Dgx Station A100 Firmware	< 10.16
Nvidia	Dgx Station A100	-

Related Weaknesses (CWE)

CWE-306 CWE-288

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5435Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5435Vendor Advisory

FAQ

What is CVE-2022-42277?

CVE-2022-42277 is a vulnerability with a CVSS score of 7.5 (HIGH). NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privi...

How severe is CVE-2022-42277?

CVE-2022-42277 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-42277?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Dgx Station A100 Firmware, Nvidia Dgx Station A100.