CVE-2022-42290

8.8 highEPSS 1.1%

High (8.8) in nvidia dgx a100 firmware. EPSS 1.1% chance of exploitation in the next 30 days.

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nvidia:dgx_a100_firmware

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5435
https://nvidia.custhelp.com/app/answers/detail/a_id/5435

Check your stack JSON