CVE-2023-0201

Katalog CVE

CVSS 6.7 · Medium EPSS 0,20%

Kerentanan Incorrect Access of Indexable Resource ('Range Error') pada nvidia bmc. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.

Rincian

Terbit di NVD

22 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-118: Incorrect Access of Indexable Resource ('Range Error')
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5449 advisory vendor