File Upload Vulnerability in NVIDIA BMC Affected by IPMI Handler

CVE-2022-42287

Summary

NVIDIA BMC is compromised by a vulnerability in its IPMI handler that permits an authorized attacker to upload and download arbitrary files under specific conditions. This weakness raises significant security concerns, potentially enabling denial of service, privilege escalation, information disclosure, and unauthorized data manipulation. Users of NVIDIA BMC should be aware of the risks associated with improper file handling within the IPMI protocol to safeguard their environments.

References