Description
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering.
References
https://nvidia.custhelp.com/app/answers/detail/a_id/5435
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5435
Vendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.2 · High
Information
Source identifier
Vulnerability status
Modified
Published
2023-01-13T01:15:08.043Z
3 years agoLast modified
2024-11-21T06:24:38.847Z
1 year ago