Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-31600PUBLISHED: 2022-07-04
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and informat...
CVE-2022-31601PUBLISHED: 2022-07-04NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
CVE-2022-31602PUBLISHED: 2022-07-04NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.
CVE-2022-31603PUBLISHED: 2022-07-04
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information disclosu...
CVE-2022-31599PUBLISHED: 2022-07-04
NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other ...
User Rank: Ninja
1/19/2015 | 1:55:38 PM
Sony hack could be a blueprint for terrorism in the cyber domain.
@Mike I do agree. Sony's ineptness has opened a whole new world of possibilities. Instead of panic, actual leadership skills were needed and those at the top of Sony's Film Division came up short.
It really is discouraging to see individuals ( Sony Entertainment Management ) who earn a considerable amount of money show they are not worth it. Of course Sony is not alone - but they certainy subscribe to the philoshpy that " you don't have to really know what you are doing to be paid well". The top management at Sony are prime examples of the "corporate disconnect" that has been fostered for the past two decades(at least).
So now Sony becomes a text book case for many things, just add "What not to do with cyber blackmail" to it.
Just don't tell Sony - they will want licensing and residuals from it.