Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rse proxy that also failed to reject the request with the invalid header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq - https://security.gentoo.org/glsa/202305-37
CVE ID: CVE-2022-42254 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T19:49:45.284Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ing, or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42255 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-23T16:24:00.221Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42256 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T19:50:24.896Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
nformation disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42257 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-23T16:23:54.699Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://n
r denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42258 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T19:51:28.990Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service, data tampering, or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
formation disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42259 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:41:43.921Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42260 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:41:05.566Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-281 Description: NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VM can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42261 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:14:51.024Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-120 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answ
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42262 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:14:24.499Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-787 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answ
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415
CVE ID: CVE-2022-42263 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:13:59.272Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial of service or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42264 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:13:31.980Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-823 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclosure, or denial of service. Additional Analyst Notes: - CVE P
h may lead to data tampering, data loss, information disclosure, or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42265 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:12:55.144Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA GPU Display Driver for Linux Problem Types: CWE-190 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-42266 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-11T15:12:25.918Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-200 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure. Additional Analyst Notes: - CVE Pr
to have access to that information, which may lead to limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415
CVE ID: CVE-2022-42267 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T20:48:41.681Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver for Windows Problem Types: CWE-345 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5415
CVE ID: CVE-2022-42268 State: PUBLISHED Published: 2023-01-12T19:38:55.196Z Last Updated: 2025-04-08T13:27:38.116Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Omniverse Audio2Face, Omniverse Create, NVIDIA Isaac Sim, Omniverse Machinima, Omniverse Code, Omniverse View Problem Types: CWE-74 Description: Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description (USD) files to customize all aspects of a scene. If a user opens a USD file that contains embedded Python code in one of t
SD) files to customize all aspects of a scene. If a user opens a USD file that contains embedded Python code in one of these applications, the embedded Python code automatically runs with the privileges of the user who opened the file. As a result, an unprivileged remote attacker could craft a USD file containing malicious Python code and persuade a local user to open the file, which may lead to information disclosure, data tampering, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5418
CVE ID: CVE-2022-42269 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T20:47:39.657Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: NVIDIA Products: Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX1, Jetson TX2 series, Jetson TX2 NX Problem Types: CWE-20 Description: NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity. The scope of the impact can extend to other components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
nd to other components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5417
CVE ID: CVE-2022-42270 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T17:55:04.545Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson AGX Orin Series Problem Types: CWE-121 Description: NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
identiality, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5417
CVE ID: CVE-2022-42271 State: PUBLISHED Published: 2023-01-11T06:00:01.038Z Last Updated: 2025-04-08T15:51:42.647Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX Servers Problem Types: CWE-120 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42272 State: PUBLISHED Published: 2023-01-12T22:16:41.786Z Last Updated: 2025-04-07T19:53:08.229Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-120 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42273 State: PUBLISHED Published: 2023-01-12T22:17:59.014Z Last Updated: 2025-04-07T19:46:05.442Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-120 Description: NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42274 State: PUBLISHED Published: 2023-01-13T00:00:38.843Z Last Updated: 2025-04-07T15:31:11.697Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-120 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42275 State: PUBLISHED Published: 2023-01-13T00:03:01.815Z Last Updated: 2025-04-07T15:30:32.191Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-288 Description: NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integrity and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42276 State: PUBLISHED Published: 2023-01-13T01:32:03.102Z Last Updated: 2025-04-07T15:29:51.185Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-288 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42277 State: PUBLISHED Published: 2023-01-13T01:32:54.744Z Last Updated: 2025-04-07T15:28:13.625Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-288 Description: NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answe
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42278 State: PUBLISHED Published: 2023-01-13T01:34:13.855Z Last Updated: 2025-04-07T15:26:55.939Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-119 Description: NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42279 State: PUBLISHED Published: 2023-01-13T01:35:15.182Z Last Updated: 2025-04-07T18:48:46.627Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-78 Description: NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42280 State: PUBLISHED Published: 2023-01-13T01:35:55.532Z Last Updated: 2025-04-07T18:48:10.774Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-22 Description: NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42281 State: PUBLISHED Published: 2023-01-13T01:37:05.251Z Last Updated: 2025-04-07T18:47:36.323Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-787 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42282 State: PUBLISHED Published: 2023-01-13T01:38:16.491Z Last Updated: 2025-04-07T18:43:51.413Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-22 Description: NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42283 State: PUBLISHED Published: 2023-01-13T01:39:07.928Z Last Updated: 2025-04-07T18:10:28.266Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-120 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435