CVE-2022-42290: OS Command Injection
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2022-42290?
Vulnerability CVE-2022-42290 is a vulnerability found in NVIDIA BMC's SPX REST API that allows an authorized attacker to inject arbitrary shell commands, potentially leading to code execution, denial of service, information disclosure, and data tampering.
What is the severity of vulnerability CVE-2022-42290?
The severity of vulnerability CVE-2022-42290 is rated as high with a severity score of 8.8.
Which software is affected by vulnerability CVE-2022-42290?
The NVIDIA DGX A100 Firmware, up to version 00.19.07, is affected by vulnerability CVE-2022-42290. The NVIDIA DGX A100 itself is not vulnerable.
What are the potential consequences of vulnerability CVE-2022-42290?
The potential consequences of vulnerability CVE-2022-42290 include code execution, denial of service, information disclosure, and data tampering.
Is there a fix available for vulnerability CVE-2022-42290?
Yes, NVIDIA has released a security advisory with mitigation steps for vulnerability CVE-2022-42290. Please refer to their official document for more details.