CVE-2022-42287: Malicious File Upload
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-42287?
CVE-2022-42287 is a vulnerability in NVIDIA BMC IPMI handler that allows an authorized attacker to upload and download arbitrary files, potentially leading to denial of service, escalation of privileges, information disclosure, and data tampering.
What is the severity of CVE-2022-42287?
The severity of CVE-2022-42287 is high, with a CVSS score of 7.8.
How does CVE-2022-42287 affect NVIDIA BMC?
CVE-2022-42287 affects NVIDIA BMC by allowing an authorized attacker to upload and download arbitrary files, which may result in various security risks.
How can CVE-2022-42287 be exploited?
CVE-2022-42287 can be exploited by an authorized attacker who can upload and download arbitrary files on NVIDIA BMC under certain circumstances.
Is NVIDIA DGX A100 affected by CVE-2022-42287?
No, NVIDIA DGX A100 is not affected by CVE-2022-42287.