Lucene search

K
nvd[email protected]NVD:CVE-2022-42274
HistoryJan 13, 2023 - 1:15 a.m.

CVE-2022-42274

2023-01-1301:15:09
CWE-120
web.nvd.nist.gov
6
nvidia
bmc
ipmi
buffer overflow
denial of service
code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.

Affected configurations

Nvd
Node
nvidiadgx_a100Match-
AND
nvidiabmcRange<00.19.07
VendorProductVersionCPE
nvidiadgx_a100-cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*
nvidiabmc*cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2022-42274