CVE-2022-42283

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42283

CVE-2022-42283 affects NVIDIA DGX Station A100 and DGX Station A800 BMCs, where the IPMI handler contains a vulnerability that can cause a buffer overflow. An attacker with the required privileges could trigger denial of service or gain code execution through the BMC IPMI path. The issue is docum...

CVE-2022-42283

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42282

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure...

CVE-2022-42282

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure...

CVE-2022-42282

CVE-2022-42282 affects NVIDIA DGX BMC SPX REST API. An authorized attacker can access arbitrary files, potentially causing information disclosure. NVIDIA advisories and the DGX updates identify a remediation path: BMC firmware versions prior to 2.09.00 are addressed by firmware update 2.09.00. Ex...

CVE-2022-42281

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2022-42281

The CVE-2022-42281 entry involves the NVIDIA DGX A100 SBIOS FsRecovery vulnerability. A highly privileged local attacker could trigger an out-of-bounds write in SBIOS FsRecovery, potentially enabling code execution, DoS, integrity compromise, or information disclosure. NVIDIA’s security bulletin ...

CVE-2022-42281

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2022-42280

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass...

CVE-2022-42280

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass...

CVE-2022-42280

The CVE-2022-42280 issue affects NVIDIA DGX BMC SPX REST authorization. An unauthorized attacker could exploit a path traversal to escalate privileges on vulnerable BMC firmware. The NVIDIA advisory lists affected products (DGX Station A100/A800), and specifies a firmware update path with BMC Fir...

CVE-2022-42279

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42279

CVE-2022-42279 is a public vulnerability in NVIDIA BMC SPX REST API where an authorized attacker can inject shell commands, potentially enabling code execution, DoS, information disclosure, and data tampering. Connected advisories confirm affected product lines as NVIDIA DGX Station A100/A800 BMC...

CVE-2022-42279

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42278

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42278

NVIDIA BMC vulnerability CVE-2022-42278 affects the SPX REST API in NVIDIA BMC. An authorized attacker could read/write arbitrary memory within the IPMI server process, potentially enabling code execution, denial of service, information disclosure, or data tampering. Affected system: NVIDIA BMC/S...

CVE-2022-42278

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42277

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

CVE-2022-42277

The CVE-2022-42277 entry affects NVIDIA DGX Station. A vulnerability in SBIOS (SmiFlash) permits a local, highly privileged user to read, write, and erase the flash, with potential for code execution, privilege escalation, denial of service, and information disclosure; impact could extend to othe...