DGX servers BMC: OS command injection on BMC

CVSS 7.2CVE-2022-42279NVIDIA / GPU stackcurated

Impact

OS command injection on BMC

Who can reach it

Authenticated mgmt-LAN admin

What to do

Flash BMC 2.09.00+ out-of-band

References

https://nvd.nist.gov/vuln/detail/CVE-2022-42279 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX servers BMC: Sensitive data exposure from BMCCVE-2022-42284 · DGX servers BMCMedium
DGX servers BMC: Info exposure from BMCCVE-2022-42288 · DGX servers BMCMedium
DGX servers BMC: RCE on BMC (buffer overflow)CVE-2022-42272 · DGX servers BMCHigh
DGX servers BMC: RCE on BMC (buffer overflow)CVE-2022-42273 · DGX servers BMCHigh
DGX servers BMC: Improper access control on BMCCVE-2022-42275 · DGX servers BMCHigh
DGX-2 SBIOS: OS command injection in firmwareCVE-2022-42289 · DGX-2 SBIOSHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.