Lucene search
HistoryJan 13, 2023 - 1:15 a.m.
CVE-2022-42275
nvidia
bmc
ipmi
unauthenticated
spi flash
secureboot
integrity
denial of service
cve-2022-42275
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service.
Affected configurations
Node
nvidiadgx_a100Match-
nvidiabmcRange<00.19.07
| CPE | Name | Operator | Version |
|---|---|---|---|
| nvidia:bmc | nvidia bmc | lt | 00.19.07 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "NVIDIA DGX servers",
"vendor": "NVIDIA",
"versions": [
{
"status": "affected",
"version": "All BMC firmware versions prior to 00.19.07"
}
]
}
]Related
prion
prion
Code injection
2023-01-13 01:15:00
cvelist
cvelist
CVE-2022-42275
2023-01-13 00:03:01
nvd
nvd
CVE-2022-42275
2023-01-13 01:15:09
nvidia
nvidia
NVIDIA DGX A100 Server and DGX Station A100 - December 2022
2022-12-19 00:00:00
7.7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2022-42275