← Database

CVE-2023-25519

HIGH CVSS: 7.8 Published: 2023-09-12 Modified: 2026-06-17

Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. 

Affected Platforms

Nvidia Bluefield 2 Ga FirmwareNvidia Bluefield 3 Ga FirmwareNvidia Bluefield 2 Lts FirmwareNvidia Bluefield 1Nvidia Bluefield 1 FirmwareNvidia Bluefield 2 LtsNvidia Bluefield 2 GaNvidia Bluefield 3 Ga

Weakness Type

CWE-286, NVD-CWE-Other

References