← All advisories

Medium severity6.2NVD Advisory· Published Jan 13, 2023· Updated Jun 17, 2026

CVE-2022-42284

CVE-2022-42284

Description

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.

Affected products

3

Nvidia/BMC2 versions
cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*range: <00.19.07
- (no CPE)
Nvidia/DGX serverscpe-rescue
Range: All BMC firmware versions prior to 00.19.07

Patches

Vulnerability mechanics

References

1

nvidia.custhelp.com/app/answers/detail/a_id/5435nvdVendor Advisory

News mentions

0

No linked articles in our index yet.