Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-42284 EUVD-2022-45359GHSA-8cxr-cq5c-vwmw

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA DGX servers

Description

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC firmware versions prior to 00.19.07 —

References