NVIDIA HGX and DGX VBIOS Unsafe Debug Access Vulnerability Leading to Denial-of-Service

A vulnerability exists in NVIDIA HGX and DGX systems due to a VBIOS misconfiguration that could allow an attacker to establish an unsafe debug access level. Exploiting this vulnerability may result in a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal system operations.

Remediation

Users can upgrade to VBIOS version 1.8.0 for Hopper HGX and DGX, or version 1.2.1 for HGX and DGX Blackwell. The latest update is available on the NVIDIA Developer Tools page.