Memory Management Flaw in NVIDIA BMC's SPX REST API

CVE-2022-42278

What is CVE-2022-42278?

NVIDIA's BMC has a vulnerability within the SPX REST API allowing an authorized attacker to manipulate memory. This can result in unauthorized read and write access to arbitrary locations in the IPMI server process's memory. The implications of this vulnerability are severe, potentially leading to code execution, denial of service, and risks of information disclosure and data tampering.

References