CVE-2022-42288: Medium severity nvidia dgx station a100 firmware vulnerability
Published Jan 13, 2023
·Updated
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure.
Affected Software
2 affected components
Nvidia Dgx A100 Firmware<00.19.07
Nvidia DGX A100
Event History
Jan 13, 2023
CVE Published
via MITRE·02:09 AM
Data Sourced
via MITRE·02:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-42288.
2
What is the severity of CVE-2022-42288?
The severity of CVE-2022-42288 is medium.
3
What is the affected software for CVE-2022-42288?
The affected software for CVE-2022-42288 is Nvidia Dgx A100 Firmware 00.19.07 in the BMC component.
4
What is the impact of CVE-2022-42288?
The impact of CVE-2022-42288 is an unauthorized attacker can use certain oracles to guess a valid BMC username, leading to information disclosure.
5
Is NVIDIA DGX A100 affected by CVE-2022-42288?
No, NVIDIA DGX A100 is not affected by CVE-2022-42288.