VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 13, 2023· Updated Jun 17, 2026

CVE-2022-42282

CVE-2022-42282

Description

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.

Affected products

3
  • Nvidia/BMC2 versions
    cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:nvidia:bmc:*:*:*:*:*:*:*:*range: <00.19.07
    • (no CPE)
  • Nvidia/DGX serverscpe-rescue
    Range: All BMC firmware versions prior to 00.19.07

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.