Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-23256

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A succes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA BlueField GA

Default version status: unaffected

  • All versions prior to 45.1020affected

NVIDIA BlueField LTS22

Default version status: unaffected

  • All versions prior to 35.4554affected

NVIDIA BlueField LTS23

Default version status: unaffected

  • All versions prior to 39.5050affected

NVIDIA BlueField LTS24

Default version status: unaffected

  • All versions prior to 43.3608affected

References