CVE-2023-0207 HIGH

CVE-2023-0207

Vendor Nvidia
Product NVIDIA DGX servers
Weakness CWE-732
Published April 22, 2023
Last update February 4, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service.

Key dates

02Disclosure timeline

April 22, 2023 CVE published
February 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-41366 OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting CVE-2026-35367 uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions CVE-2026-41489 Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks CVE-2025-34323 Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules CVE-2022-43915 IBM App Connect Enterprise Certified Container