Skip to content
OpenAdvisories
High · 7.2 CVE-2022-42279 EUVD-2022-45354GHSA-fqwv-634j-ggr9

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to co…

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Description

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC firmware versions prior to 00.19.07 —

References