Priority LOW 38
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00598 · Published 2026-05-20 · Fixed in OTA0 CWE-321
Priority LOW 15
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00147 · Published 2025-11-25 · No fix listed CWE-226
Priority LOW 17
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00149 · Published 2025-11-25 · No fix listed CWE-670
Priority LOW 15
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00145 · Published 2025-11-25 · No fix listed CWE-226
Priority LOW 24
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2025-11-25 · No fix listed CWE-476
Priority LOW 24
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00149 · Published 2025-11-25 · No fix listed CWE-226
Priority LOW 35
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-11-25 · No fix listed CWE-119
Priority LOW 30
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2025-11-25 · No fix listed CWE-180
Priority LOW 24
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity.
CVSS 3.1MEDIUM 5.7· Local · No auth · No interaction · EPSS 0.00113 · Published 2025-11-25 · No fix listed CWE-354
Priority LOW 25
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read.
CVSS 3.1MEDIUM 5.7· Local · No auth · No interaction · EPSS 0.00154 · Published 2025-11-25 · No fix listed CWE-690
Priority LOW 25
NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read.
CVSS 3.1MEDIUM 5.7· Local · No auth · No interaction · EPSS 0.00175 · Published 2025-11-25 · No fix listed CWE-20
Priority LOW 35
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2025-11-25 · No fix listed CWE-787
Priority LOW 35
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2025-11-25 · No fix listed CWE-787
Priority LOW 34
NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls.
CVSS 3.1HIGH 8.0· Local · No auth · No interaction · EPSS 0.00168 · Published 2025-11-25 · No fix listed CWE-269
Priority MEDIUM 41
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00182 · Published 2025-11-25 · No fix listed CWE-269