← CVE Intelligence

CVE-2022-42289

NVIDIA / NVIDIA DGX servers PUBLISHED

Description (CNA)

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.

Affected (CNA)

Vendor / productVersions
NVIDIA / NVIDIA DGX serversaffected All BMC firmware versions prior to 00.19.07

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.