CVE-2022-42272

Опубликовано: 12 янв. 2023

Источник: nvd

CVSS3: 8.1

CVSS3: 8.8

EPSS Низкий

Описание

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges.

Ссылки

https://nvidia.custhelp.com/app/answers/detail/a_id/5435
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5435
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:nvidia:dgx_a100_firmware:*:*:*:*:bmc:*:*:*

Версия до 00.19.07 (исключая)

cpe:2.3:h:nvidia:dgx_a100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.0078

Низкий

8.1 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

GHSA-q9hw-5mq9-f9jp

CVSS3: 8.8

github

около 3 лет назад

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges.

EPSS

Процентиль: 73%

0.0078

Низкий

8.1 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-120