DGX-2 BMC: Path traversal

CVSS 6.0CVE-2022-42287NVIDIA / GPU stackcurated

Impact

Path traversal

Who can reach it

Network-adjacent authenticated

What to do

Flash DGX-2 BMC firmware

References

https://nvd.nist.gov/vuln/detail/CVE-2022-42287 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX-2 BMC: RCE on BMC (buffer overflow)CVE-2022-42274 · DGX-2 BMCHigh
DGX-2 BMC: Path traversalCVE-2022-42280 · DGX-2 BMCHigh
DGX-2 BMC: Info disclosure via path traversalCVE-2022-42282 · DGX-2 BMCMedium
DGX-2 BMC: Buffer overflowCVE-2022-42283 · DGX-2 BMCMedium
NVIDIA DGX-1 - SBIOS / SMM firmware: A flaw in the Bds phase reaches firmware code execution and privilege escalationCVE-2023-25509 · NVIDIA DGX-1 - SBIOS / SMM firmwareMedium
vGPU software (Virtual GPU Manager): Host-side DoS (null deref in vGPU Manager)CVE-2023-31026 · vGPU software (Virtual GPU Manager)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.