Lucene search

[email protected]NVD:CVE-2022-42287

HistoryJan 13, 2023 - 4:15 a.m.

CVE-2022-42287

2023-01-1304:15:08

CWE-22

CWE-434

[email protected]

web.nvd.nist.gov

nvidia

bmc

vulnerability

ipmi

unauthorized

file upload

download

denial of service

privileges escalation

information disclosure

data tampering

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

16.2%

JSON

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering.

Affected configurations

Nvd

Node

nvidiabmcRange<00.19.07

AND

nvidiadgx_a100Match-

VendorProductVersionCPE
nvidiabmc*cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*
nvidiadgx_a100-cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	bmc	*	cpe:2.3:o:nvidia:bmc::::::::
nvidia	dgx_a100	-	cpe:2.3:h:nvidia:dgx_a100:-:::::::*

References

nvidia.custhelp.com/app/answers/detail/a_id/5435

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

16.2%

JSON

Related for NVD:CVE-2022-42287

cvelist1 prion1 cve1 nvidia3