# CVE-2023-0201

## Summary

- **CVE ID:** CVE-2023-0201
- **Severity:** MEDIUM
- **CVSS Score:** 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-118
- **Published:** Apr 22, 2023
- **Last Modified:** Mar 13, 2026

## Description

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.

## Affected Products

- NVIDIA — NVIDIA DGX servers (All BMC versions prior to 1.08.00)

## References

- [CNA](https://nvidia.custhelp.com/app/answers/detail/a_id/5449)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.04%
- **EPSS Percentile:** 12.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._