Vulnerability Details CVE-2022-42290
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.8%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2022-42290
-
cpe:2.3:h:nvidia:dgx_a100:-
-
cpe:2.3:o:nvidia:dgx_a100_firmware:-