DGX-2 BMC: Info disclosure via path traversal

CVSS 6.5CVE-2022-42282NVIDIA / GPU stackcurated

Impact

Info disclosure via path traversal

Who can reach it

Network-adjacent authenticated

What to do

Flash DGX-2 BMC firmware

References

https://nvd.nist.gov/vuln/detail/CVE-2022-42282 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX-2 BMC: Buffer overflowCVE-2022-42283 · DGX-2 BMCMedium
DGX-2 BMC: Path traversalCVE-2022-42287 · DGX-2 BMCMedium
DGX-2 BMC: RCE on BMC (buffer overflow)CVE-2022-42274 · DGX-2 BMCHigh
DGX-2 BMC: Path traversalCVE-2022-42280 · DGX-2 BMCHigh
ConnectX-5/6/6-DX NIC firmware: NIC DoS (improper exception handling)CVE-2023-0204 · ConnectX-5/6/6-DX NIC firmwareMedium
Cumulus Linux (neighmgrd/nlmanager): Switch DoS via crafted packetCVE-2023-25526 · Cumulus Linux (neighmgrd/nlmanager)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.