Lucene search

NvidiaCVELIST:CVE-2022-42284

HistoryJan 13, 2023 - 1:45 a.m.

CVE-2022-42284

2023-01-1301:45:54

CWE-312

nvidia

www.cve.org

nvidia bmc

user passwords

credentials exposure

database security

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVIDIA DGX servers",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All BMC firmware versions prior to 00.19.07"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5435

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2022-42284