PT-2023-14085 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns the storage of user passwords in an obfuscated form within a database that is accessible by the host, potentially leading to credentials exposure. Recommendations: At...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker could exploit this vulnerability to cause a buffer overflow and result in a denial of service or gain code execution...

PT-2023-14081 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue is related to a path traversal vulnerability in the SPX REST auth handler of NVIDIA BMC. This vulnerability can be exploited by an unauthorized attacker, potentially leading to...

PT-2023-14084 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue is related to a buffer overflow in the IPMI handler of NVIDIA BMC. An authorized attacker can exploit this to cause a denial of service or potentially gain code execution...

PT-2023-14079 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to read and write to arbitrary locations within the memory context of the IPMI serve...

PT-2023-14080 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to inject arbitrary shell commands. This could potentially lead to code execution,...

PT-2023-14089 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the IPMI handler of NVIDIA BMC, allowing an unauthorized attacker to potentially guess a valid BMC username through certain oracles, which may resul...

PT-2023-14091 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to inject arbitrary shell commands. This could lead to code execution, denial of...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker could exploit this vulnerability to cause a buffer overflow and result in a denial of service or gain code execution...

NVIDIA BMC 路径遍历漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker could exploit this vulnerability to access files and directories stored outside of the web root folder...

PT-2023-14088 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the IPMI handler of NVIDIA BMC, allowing an authorized attacker to upload and download arbitrary files under certain circumstances. This may lead to...

CVE-2022-42273

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42272

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges...

Buffer overflow

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

Buffer overflow

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges...

CVE-2022-42273

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42273

NVIDIA DGX Station A100/A800 BMC is affected by CVE-2022-42273 due to a vulnerability in libwebsocket that can be triggered by an attacker with required privileges to cause a buffer overflow, leading to denial of service or code execution. Affected component: BMC firmware/libwebsocket. Impact: de...

CVE-2022-42273

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42272

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges...

CVE-2022-42272

CVE-2022-42272 (NVIDIA) affects NVIDIA DGX Station A100 and DGX Station A800 BMC (IPMI handler). The issue is a buffer overflow in the BMC IPMI handler that an attacker with the required privileges can trigger, potentially leading to code execution, denial of service, or escalation of privileges....