Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-23262

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A success

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA ConnectX GA

Default version status: unaffected

  • All versions prior to 45.1020affected

NVIDIA ConnectX LTS22

Default version status: unaffected

  • All versions prior to 35.4554affected

NVIDIA ConnectX LTS23

Default version status: unaffected

  • All versions prior to 39.5050affected

NVIDIA ConnectX LTS24

Default version status: unaffected

  • All versions prior to 43.3608affected

NVIDIA ConnectX-4

Default version status: unaffected

  • All versions prior to 12.28.2704affected

NVIDIA ConnectX-4 LX

Default version status: unaffected

  • All versions prior to 14.32.1908affected

References