Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-42285

Description

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering.

POC

Reference

- https://nvidia.custhelp.com/app/answers/detail/a_id/5435

Github

No PoCs found on GitHub currently.