7.8

CVE-2023-25519

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. 

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Bluefield 1 Firmware Version >= 18.24.1000
   Nvidia ≫ Bluefield 1 Version-
Nvidia ≫ Bluefield 2 Lts Firmware Version < 24.35.3006
   Nvidia ≫ Bluefield 2 Lts Version-
Nvidia ≫ Bluefield 2 Ga Firmware Version < 24.38.1002
   Nvidia ≫ Bluefield 2 Ga Version-
Nvidia ≫ Bluefield 3 Ga Firmware Version < 32.38.1002
   Nvidia ≫ Bluefield 3 Ga Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.201
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
psirt@nvidia.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-286 Incorrect User Management

The product does not properly manage a user within its environment.