What’s Vulnerable › Vulnerabilities

CVE-2023-0209

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-22 · updated 2026-06-17
• Weakness: CWE-287

Description

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware implant, data tampering, and SecureBoot bypass.

Affected products

• NVIDIA Sbios: before 52w_3a13 — fixed in 52w_3a13

How to fix

Upgrade to a fixed version: NVIDIA Sbios 52w_3a13. Check the vendor advisory for mitigations.

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5458
• https://nvidia.custhelp.com/app/answers/detail/a_id/5458

Get alerted when CVE-2023-0209 or the next vulnerability affects your stack