CVE-2022-42288
Medium
Description
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure.
SeverityMedium
CVSS5.3
Exploit probability—
ProductNvidia Dgx A100 Firmware
PublishedJan 13, 2023
First seenJan 13, 2023
Weakness typeCWE-208CWE-208
How to fix
Update
- nvidia dgx_a100_firmware00.19.07 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia dgx_a100_firmware | v < 00.19.07 | 00.19.07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.