Medium · 6.5 CVE-2022-42282 EUVD-2022-45357GHSA-jx8f-64xg-p4fj

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information…

Published Jan 13, 2023 · Updated Apr 7, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: NVIDIA DGX servers

Description

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.

Affected products

Vendor	Product	Affected	Fixed
NVIDIA	NVIDIA DGX servers	All BMC firmware versions prior to 00.19.07	—

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5435