GCVE - cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:nvidia:sbios:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Sbios (`002c0030-6519-536d-97a2-5f425936560b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-25509`	vulnerable	2026-06-08 05:56:09.105796	Details available MEDIUM (6) NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. Published: 2023-04-22T02:32:42.396Z Updated: 2025-02-04T19:02:38.257Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5458	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25506`	vulnerable	2026-06-08 05:56:09.104585	Details available HIGH (7.5) NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components. Published: 2023-04-22T02:30:26.791Z Updated: 2025-02-04T19:03:47.410Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5458	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0209`	vulnerable	2026-06-08 05:52:04.523340	Details available HIGH (8.2) NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware implant, data tampering, and SecureBoot bypass. Published: 2023-04-22T02:28:54.450Z Updated: 2025-02-04T19:29:14.779Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5458	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0207`	vulnerable	2026-06-08 05:52:04.520471	Details available HIGH (7.5) NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service. Published: 2023-04-22T02:28:08.389Z Updated: 2025-02-04T19:29:29.893Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5449	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42286`	vulnerable	2026-06-08 05:49:29.700515	Details available MEDIUM (6) DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. Published: 2023-01-13T02:06:23.110Z Updated: 2025-04-07T18:02:45.241Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42285`	vulnerable	2026-06-08 05:49:29.699780	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.