Arbitrary Command Injection in NVIDIA BMC SPX REST API

CVE-2022-42290

What is CVE-2022-42290?

The NVIDIA Baseboard Management Controller contains a vulnerability within its SPX REST API that allows an authorized attacker to inject arbitrary shell commands. This exploit could lead to various severe consequences, including unauthorized code execution, denial of service, confidential information disclosure, and potential data tampering. Organizations utilizing affected versions of the BMC should evaluate and mitigate risks associated with this vulnerability to ensure system integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References