Skip to content
OpenAdvisories
High · 7.2 CVE-2022-42278 EUVD-2022-45353GHSA-chmh-mcvp-rwfv

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memo…

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Description

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC firmware versions prior to 00.19.07 —

References