CVE-2022-42261
CVE-2022-42261
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
30 Dec 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
NVIDIA · vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →