← Database

CVE-2025-23337

MEDIUM CVSS: 6.7 Published: 2025-09-17 Modified: 2026-06-17

Description

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected Platforms

Unknown

Weakness Type

CWE-1244

References