11337 matches found
Design/Logic Flaw
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...
Information disclosure
NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...
Design/Logic Flaw
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure...
Buffer overflow
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...
Design/Logic Flaw
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...
CVE-2022-42289
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...
CVE-2022-42289
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...
CVE-2022-42289
CVE-2022-42289 affects NVIDIA BMC SPX REST API on DGX Station A100/A800 (and related DGX hardware). The vulnerability allows an authorized attacker to inject arbitrary shell commands via the SPX REST API, potentially enabling code execution, denial of service, information disclosure, and data tam...
CVE-2022-42288
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42288
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure...
CVE-2022-42288
Summary (concrete details): CVE-2022-42288 affects NVIDIA DGX Station A100 and DGX Station A800 BMCs where the IPMI handler can be probed by an unauthorized attacker to guess a valid BMC username via certain oracles, potentially leading to information disclosure. The issue is documented across NV...
CVE-2022-42287
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
CVE-2022-42287
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
CVE-2022-42287
CVE-2022-42287 relates to NVIDIA BMC IPMI handler vulnerability. An authorized attacker could upload/download arbitrary files under certain conditions, potentially causing denial of service, privilege escalation, information disclosure, and data tampering. Affected products include NVIDIA DGX Sta...
CVE-2022-42284
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure...
CVE-2022-42284
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure...
CVE-2022-42284
CVE-2022-42284 concerns NVIDIA DGX Station A100/A800 BMC: passwords are stored in an obfuscated form in a host-accessible database, potentially leading to credential exposure. The Red Hat/NVD entries and NVIDIA bulletin corroborate that this is a BMC storage credential exposure issue. The NVIDIA ...
CVE-2022-42283
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...
CVE-2022-42283
CVE-2022-42283 affects NVIDIA DGX Station A100 and DGX Station A800 BMCs, where the IPMI handler contains a vulnerability that can cause a buffer overflow. An attacker with the required privileges could trigger denial of service or gain code execution through the BMC IPMI path. The issue is docum...