Description
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | NVIDIA DGX servers | All BMC firmware versions prior to 00.19.07 | — |