Arbitrary Command Injection Vulnerability in NVIDIA BMC SPX REST API

CVE-2022-42279

What is CVE-2022-42279?

The NVIDIA BMC SPX REST API is susceptible to a command injection vulnerability, allowing authorized attackers to execute arbitrary shell commands. This may result in serious consequences, including code execution, denial of service scenarios, unauthorized information disclosure, and potential data tampering. It is crucial for users to take immediate action to mitigate this vulnerability and protect their systems.

References