{"id":"CVE-2022-21820","aliases":["EUVD-2022-26980","GHSA-rqg9-g4fr-3cfj"],"status":"published","title":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of...","description":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.16508,"percentile":0.9702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-755","CWE-787"],"published":"2022-03-24T17:05:10Z","modified":"2026-06-17T04:27:02Z","products":[{"vendor":"nvidia","product":"data_center_gpu_manager"},{"vendor":"nvidia","product":"nvidia data center gpu manager"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5328","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/167396/NVIDIA-Data-Center-GPU-Manager-Remote-Memory-Corruption.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21820"},{"url":"https://github.com/advisories/GHSA-rqg9-g4fr-3cfj"}],"sources":{"cve":[{"id":"CVE-2022-21820","description":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.","status":"published","published":"2022-03-24T17:05:10Z","modified":"2024-08-03T02:53:36.259Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:29.478363Z"}],"euvd":[{"id":"EUVD-2022-26980","description":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.","status":"published","published":"2022-03-24T17:05:10Z","modified":"2024-08-03T02:53:36Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:25:53.384523Z"}],"ghsa":[{"id":"GHSA-rqg9-g4fr-3cfj","title":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of...","description":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.","status":"published","published":"2022-03-25T00:00:33Z","modified":"2023-07-24T15:30:20Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-20","CWE-755"],"updated_at":"2026-11-02T14:54:43.067561Z"}],"nvd":[{"id":"CVE-2022-21820","description":"NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.","status":"published","published":"2022-03-24T17:15:08.23Z","modified":"2026-06-17T04:27:02.797Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-755","CWE-787"],"updated_at":"2026-11-02T14:07:14.24948Z"}]}}