[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBK-LoobXDY9XQbEcxstd5j7y1uN_nCWZmfEi-6_WFYE":3,"g5a-risk:CVE-2022-42277":117},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":49,"references":50,"referencesCount":56,"weaknesses":57,"weaknessesCount":49,"isActivelyExploited":71,"cisaInfo":26,"otxData":26,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":112,"notableEvents":113},"CVE-2022-42277","What is CVE-2022-42277?","NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.","NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may ...","2023-01-13T02:15:07.957","2023-01-20T15:29:55.67",8.2,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","HIGH","NONE","CHANGED",null,1.5,6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":28},"psirt@nvidia.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",7.5,0.8,0.00184,[36,36,36,36,36,36,36],"High",[40,45],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"nvidia","dgx_station_a100_firmware","*","cpe:2.3:o:nvidia:dgx_station_a100_firmware:*:*:*:*:sbios:*:*:*",{"vendor":41,"product":46,"version":47,"criteria":48,"vulnerable":4},"dgx_station_a100","-","cpe:2.3:h:nvidia:dgx_station_a100:-:*:*:*:*:*:*:*",2,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5435","Custhelp",[55],"Vendor Advisory",1,[58,66],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":67,"name":68,"description":69,"extendedDescription":62,"status":70,"abstraction":64,"structure":65},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","Incomplete",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2022-42277? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-42277, a high severity cyber security vulnerability from 2023. NVIDIA DGX Station contains a vulnerability in SBIOS in the...","CVE-2022-42277, CVE-2022-42277 vulnerability, CVE-2022-42277 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, nvidia security, dgx_station_a100_firmware vulnerability, dgx_station_a100 vulnerability","\u002Fwhat-is\u002Fcve-2022-42277",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-42277","Cybersecurity","CVE-2022-42277, CVE-2022-42277 vulnerability, CVE-2022-42277 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":100,"Negate":26,"Nodes":101},"AND",[102,108],{"Operator":103,"Negate":26,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":107,"VersionEndIncluding":26},"0010FB43-8924-4B49-954F-F4735EECA098","10.16",{"Operator":103,"Negate":26,"CPEMatch":109},[110],{"Vulnerable":26,"Criteria":48,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"96A05233-855C-4099-BF73-0D04F8F58A44",[],[],{"lastModified":11,"cacheTime":115,"version":116},1792368460649,"2.0",{"score":118,"band":119,"action":120,"scoredAt":121},46,"Medium","Plan remediation","2026-10-16T06:56:51.58843+00:00"]