PT-2022-15154 · Nvidia · Nvidia Dcgm

Jeremy Brown · Published 2022-03-24 · Updated 2023-07-24 · CVE-2022-21820

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NVIDIA DCGM (affected versions not specified)

Description The issue allows a network user to cause detection of error conditions without action, potentially leading to limited code execution, denial of service, escalation of privileges, and impacts to data confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Memory Corruption

RCE

Weakness Enumeration

CWE-755

CWE-787

CWE-20

Related Identifiers

CVE-2022-21820

Affected Products

Nvidia Dcgm

References · 5

• 🔥 http://packetstormsecurity.com/files/167396/NVIDIA-Data-Center-GPU-Manager-Remote-Memory-Corruption.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-21820 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5328 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21820 · Vendor Advisory
• https://t.me/cibsecurity/39499 · Telegram Post