{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T00:25:16.677","vulnerabilities":[{"cve":{"id":"CVE-2023-31031","sourceIdentifier":"psirt@nvidia.com","published":"2024-01-12T19:15:10.257","lastModified":"2026-06-17T05:56:07.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering."},{"lang":"es","value":"NVIDIA DGX A100 SBIOS contiene una vulnerabilidad en la que un usuario puede provocar un desbordamiento de búfer en la región Heap de la memoria mediante acceso local. Una explotación exitosa de esta vulnerabilidad puede provocar la ejecución de código, denegación de servicio, divulgación de información y manipulación de datos."}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"nvidia","product":"DGX A100","defaultStatus":"unaffected","versions":[{"version":"All SBOIS versions prior to 1.25","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@nvidia.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-12T20:27:03.462153Z","id":"CVE-2023-31031","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@nvidia.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:sbios:*:*:*","versionEndExcluding":"1.25","matchCriteriaId":"BF83A6E1-F48A-4FF6-B04E-6A1240FFA8C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*","matchCriteriaId":"8807CB65-5F49-42E8-B5D8-36943418ADB9"}]}]}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5510","source":"psirt@nvidia.com","tags":["Vendor Advisory"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}