Skip to content
OpenAdvisories
High · 7.1 CVE-2022-42280 EUVD-2022-45355GHSA-ff9p-3jg4-r2j6

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead …

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA DGX servers

Description

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All BMC firmware versions prior to 00.19.07 —

References