CVE-2023-0202 (published 2023-04-22T02:23:32.519Z)
NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure.
Affected products: Vendor: NVIDIA
Product: NVIDIA DGX servers
Versions: All SBIOS versions prior to 1.18