NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.Referenceshttps://nvidia.custhelp.com/app/answers/detail/a_id/5435