Skip to content
OpenAdvisories
Medium · 6.0 CVE-2022-42287 EUVD-2022-45362GHSA-476q-p4g6-6rx2

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain cir…

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Description

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC firmware versions prior to 00.19.07 —

References