Medium · 5.3 CVE-2022-42288 EUVD-2022-45363GHSA-326f-jv9v-g2jj

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, …

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA DGX servers

Description

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure.

Affected products

Vendor	Product	Affected	Fixed
NVIDIA	NVIDIA DGX servers	All BMC firmware versions prior to 00.19.07	—

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5435