Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-23299

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

Description

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA BlueField GA

Default version status: unaffected

  • All versions prior to 46.1006affected

NVIDIA BlueField LTS22

Default version status: unaffected

  • All versions prior to 35.4554affected

NVIDIA BlueField LTS23

Default version status: unaffected

  • All versions prior to 39.5050affected

NVIDIA BlueField LTS24

Default version status: unaffected

  • All versions prior to 43.3608affected

NVIDIA ConnectX GA

Default version status: unaffected

  • All versions prior to 46.1006affected

NVIDIA ConnectX LTS22

Default version status: unaffected

  • All versions prior to 35.4554affected

NVIDIA ConnectX LTS23

Default version status: unaffected

  • All versions prior to 39.5050affected

NVIDIA ConnectX LTS24

Default version status: unaffected

  • All versions prior to 43.3608affected

NVIDIA ConnectX-4 LX

Default version status: unaffected

  • All versions prior to 32.1908affected

References