Approved changes feed: RSS · Atom

cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorNvidia (40c2793d-f37d-5eb8-a9a9-0c9926e4695b)
ProductDgx A100 Firmware (b79d4202-d27f-5903-bca5-9f744659f11b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31035 vulnerable 2026-06-08 06:04:41.696783 CVE
HIGH (7.5)
NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Published: 2024-01-12T18:31:38.411Z
Updated: 2024-08-30T19:10:51.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31603 vulnerable 2026-06-08 05:43:41.161523 Details available
MEDIUM (6.4)
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information disclosure.
Published: 2022-07-04T18:10:36.000Z
Updated: 2024-08-03T07:26:00.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31602 vulnerable 2026-06-08 05:43:41.161068 Details available
MEDIUM (6.4)
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.
Published: 2022-07-04T18:10:31.000Z
Updated: 2024-08-03T07:25:59.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31601 vulnerable 2026-06-08 05:43:41.160635 Details available
MEDIUM (6.7)
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
Published: 2022-07-04T18:10:27.000Z
Updated: 2024-08-03T07:26:00.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31600 vulnerable 2026-06-08 05:43:41.160099 Details available
HIGH (7.5)
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and information disclosure. The scope of impact can extend to other components.
Published: 2022-07-04T18:10:19.000Z
Updated: 2024-08-03T07:26:01.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31599 vulnerable 2026-06-08 05:43:41.158572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28200 vulnerable 2026-06-08 05:42:44.213016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.