Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42278


NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering.


Published

2023-01-13T02:15:08.043

Last Modified

2024-11-21T07:24:38.847

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nvidia bmc < 00.19.07 Yes
Hardware nvidia dgx_a100 - No

References