DGX-2 BMC: Path traversal

CVSS 7.1CVE-2022-42280NVIDIA / GPU stackcurated

Impact

Path traversal -> file read/write on BMC

Who can reach it

Network-adjacent authenticated

What to do

Flash DGX-2 BMC firmware out-of-band

References

https://nvd.nist.gov/vuln/detail/CVE-2022-42280 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX-2 BMC: Info disclosure via path traversalCVE-2022-42282 · DGX-2 BMCMedium
DGX-2 BMC: Buffer overflowCVE-2022-42283 · DGX-2 BMCMedium
DGX-2 BMC: Path traversalCVE-2022-42287 · DGX-2 BMCMedium
DGX-2 BMC: RCE on BMC (buffer overflow)CVE-2022-42274 · DGX-2 BMCHigh
Linux memory management (NUMA balancing) as used by Gaudi accelerators: Automatic NUMA balancing migrated copy-on-writeCVE-2022-48797 · Linux memory management (NUMA balancing) as used by Gaudi acceleratorsHigh
habanalabs kernel driver (Gaudi NIC queue validation): A shift-out-of-bounds in Gaudi NIC queue validation: the driverCVE-2022-50026 · habanalabs kernel driver (Gaudi NIC queue validation)High

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.