CVE-2022-42287

CVE-2022-42287 relates to NVIDIA BMC IPMI handler vulnerability. An authorized attacker could upload/download arbitrary files under certain conditions, potentially causing denial of service, privilege escalation, information disclosure, and data tampering. Affected products include NVIDIA DGX Sta...

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-42283

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42283

CVE-2022-42283 affects NVIDIA DGX Station A100 and DGX Station A800 BMCs, where the IPMI handler contains a vulnerability that can cause a buffer overflow. An attacker with the required privileges could trigger denial of service or gain code execution through the BMC IPMI path. The issue is docum...

CVE-2022-42283

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42278

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42278

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42274

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42275

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service...

Buffer overflow

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

Code injection

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service...

CVE-2022-42275

Mode C: Affected product is NVIDIA DGX Station A100/A800 BMC. CVE-2022-42275 concerns the IPMI handler where an unauthenticated host can write to the host SPI flash, bypassing secure boot protections, leading to loss of integrity and potential DoS. Root cause: IPMI/BMC tooling vulnerability allow...

CVE-2022-42275

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service...

CVE-2022-42275

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service...

CVE-2022-42274

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42274

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42274

CVE-2022-42274 affects NVIDIA DGX Station A100/A800 BMC firmware (IPMI handler). The Red Hat/NVD/NVIDIA bulletins describe a vulnerability where an attacker with required privileges can trigger a buffer overflow in the BMC IPMI handler, leading to denial of service or potential code execution. Im...

CVE-2022-42287: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

CVE-2022-42288: Observable Timing Discrepancy

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...