Path Traversal Vulnerability in NVIDIA BMC's SPX REST Auth Handler
CVE-2022-42280
7.1HIGH
What is CVE-2022-42280?
NVIDIA BMC has been discovered to have a vulnerability in its SPX REST authentication handler. This flaw allows unauthorized attackers to exploit a path traversal issue, potentially leading to an authentication bypass. Such vulnerabilities can undermine the security measures in place, allowing attackers to gain access to sensitive data or administrative functions without proper credentials, posing significant risks to the integrity of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
NVIDIA DGX servers All BMC firmware versions prior to 00.19.07
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved