---
cve: "CVE-2022-42287"
severity: "MEDIUM"
cvss: 6.0
epss: "22%"
vendor: "NVIDIA"
kev: false
exploited: false
published: "2023-01-13 04:15:08"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-11T04:31:48+02:00"
---

# CVE-2022-42287

> 6.0 MEDIUM

## Beschreibung

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://nvidia.custhelp.com/app/answers/detail/a_id/5435>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-42287) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_