Threat Investigation
Request a demo

CVE-2023-25506

High

Description

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components.

SeverityHigh
CVSS7.5
Exploit probability—
ProductNvidia Sbios
PublishedApr 22, 2023
First seenApr 22, 2023
Weakness typeCWE-788CWE-788

How to fix

Update
  • nvidia sbios52w_3a13 or later

Affected products

ProductAffected versionsFixed in
nvidia sbiosv < 52w_3a1352w_3a13

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.