CVE-2022-42274

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution...

CVE-2022-42274

CVE-2022-42274 affects NVIDIA DGX Station A100/A800 BMC firmware (IPMI handler). The Red Hat/NVD/NVIDIA bulletins describe a vulnerability where an attacker with required privileges can trigger a buffer overflow in the BMC IPMI handler, leading to denial of service or potential code execution. Im...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker could exploit this vulnerability to cause a buffer overflow and result in a denial of service or gain code execution...

NVIDIA BMC 访问控制错误漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could cause loss of integrity and denial of service...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could read and write to arbitrary locations within the IPMI server process, which could lead to code execution, denial of service, information...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS. An attacker could exploit this vulnerability to cause code execution, denial of service, or privilege escalation...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could access arbitrary files, which could lead to information leakage...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS. An attacker exploiting this vulnerability could disable SPI flash protection, which could lead to denial of service, privilege escalation, or data...

NVIDIA BMC 操作系统命令注入漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could inject arbitrary shell commands, which could lead to code execution, denial of service, information disclosure, and data tampering...

PT-2023-14090 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns the SPX REST API in NVIDIA BMC, where an authorized attacker can inject arbitrary shell commands. This could lead to code execution, denial of service, information...

CVE-2022-42276: Authentication Bypass Using an Alternate Path or Channel

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

PT-2023-14078 · Nvidia · Nvidia Dgx Station

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX Station affected versions not specified Description: The issue allows a local user with elevated privileges to read, write, and erase flash, potentially leading to code execution, escalation of privileges, denial of service, and...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could guess a valid BMC username, which could lead to information disclosure...

PT-2023-14081 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue is related to a path traversal vulnerability in the SPX REST auth handler of NVIDIA BMC. This vulnerability can be exploited by an unauthorized attacker, potentially leading to...

PT-2023-14085 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns the storage of user passwords in an obfuscated form within a database that is accessible by the host, potentially leading to credentials exposure. Recommendations: At...

PT-2023-14088 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the IPMI handler of NVIDIA BMC, allowing an authorized attacker to upload and download arbitrary files under certain circumstances. This may lead to...

PT-2023-14086 · Nvidia · Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue concerns a vulnerability in the Pre-EFI Initialization PEI phase, where a privileged user can disable SPI flash protection. This may lead to denial of service, escalation o...

PT-2023-14083 · Nvidia · Nvidia Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to access arbitrary files. This may lead to information disclosure. Recommendations:...

CVE-2022-42279: Improper Neutralization of Special Elements used in an OS Command

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

PT-2023-14087 · Nvidia · Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue is related to a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. Recommendations: At the moment, there is no...