CVE-2022-42286 high priority · track · 31 EPSS 0.002 · 9 %ile EPSS 0.2% probability 0.002 percentile 9 %ile EPSS · exploit prediction — probability this CVE is exploited in the next 30 days (0–1), and its percentile rank among all CVEs EU US grimoire priority P2 · Scheduled
0.19% (9th) EPSS
CVSS 7.8 · high
3 sources
cnnvd · enisa_euvd · nvd
EPSS · scored 2026-10-27
DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.
neighborhood Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode ⚠ sources disagree · medium–high · 6–7.8
v3.1 7.8 high CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 7.8 high Attack Vector Local Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High primary · NVD / NIST US exploitability 1.8 · impact 5.9 v3.1 6 medium CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS v3.1 6 medium Attack Vector Local Attack Complexity Low Privileges Required High User Interaction None Scope Unchanged Confidentiality Impact None Integrity Impact High Availability Impact High secondary · ENISA EU v3.1 6 medium CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS v3.1 6 medium Attack Vector Local Attack Complexity Low Privileges Required High User Interaction None Scope Unchanged Confidentiality Impact None Integrity Impact High Availability Impact High secondary · psirt@nvidia.com exploitability 0.8 · impact 5.2 v3.1 7.1 high CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U CVSS v3.1 7.1 high Attack Vector Local Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · CVSS-BT (t0sche) A stakeholder decision — act, attend, or track — from exploitation and impact.
Exploitation: none · Automatable: no · Technical Impact: total coordinator cisa_ssvcUS Other names and identifiers for this entity.
External citations — patches, advisories, analysis.
← back to search