CVE-2022-42288

5.3 mediumEPSS 0.5%

Medium (5.3) in nvidia dgx a100 firmware. EPSS 0.5% chance of exploitation in the next 30 days.

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs: CWE-203, CWE-208
Published: 2023-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nvidia:dgx_a100_firmware

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5435
https://nvidia.custhelp.com/app/answers/detail/a_id/5435

Check your stack JSON