Command Injection Vulnerability in NVIDIA BMC's SPX REST API

CVE-2022-42289

What is CVE-2022-42289?

NVIDIA BMC is susceptible to a command injection vulnerability in its SPX REST API. An attacker with valid credentials can exploit this flaw to execute arbitrary shell commands. This may result in various harmful outcomes, including code execution, denial of service, and unauthorized access to sensitive information. Organizations utilizing affected NVIDIA products should take immediate action to mitigate potential risks associated with this vulnerability.

References