CVE-2023-25519
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges.
NVIDIA ConnectX Host Firmware para BlueField Data Processing Unit contiene una vulnerabilidad en la que un anfitrión restringido puede provocar un error de administración de usuarios incorrecto. Una explotación exitosa de esta vulnerabilidad puede provocar una escalada de privilegios. 
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-02-07 CVE Reserved
- 2023-09-12 CVE Published
- 2023-09-12 EPSS Updated
- 2024-09-26 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-286: Incorrect User Management
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479 | Broken Link |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5479 | 2023-09-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nvidia Search vendor "Nvidia" | Bluefield 1 Firmware Search vendor "Nvidia" for product "Bluefield 1 Firmware" | >= 18.24.1000 Search vendor "Nvidia" for product "Bluefield 1 Firmware" and version " >= 18.24.1000" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Bluefield 1 Search vendor "Nvidia" for product "Bluefield 1" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Bluefield 2 Lts Firmware Search vendor "Nvidia" for product "Bluefield 2 Lts Firmware" | < 24.35.3006 Search vendor "Nvidia" for product "Bluefield 2 Lts Firmware" and version " < 24.35.3006" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Bluefield 2 Lts Search vendor "Nvidia" for product "Bluefield 2 Lts" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Bluefield 2 Ga Firmware Search vendor "Nvidia" for product "Bluefield 2 Ga Firmware" | < 24.38.1002 Search vendor "Nvidia" for product "Bluefield 2 Ga Firmware" and version " < 24.38.1002" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Bluefield 2 Ga Search vendor "Nvidia" for product "Bluefield 2 Ga" | - | - |
Safe
|
| Nvidia Search vendor "Nvidia" | Bluefield 3 Ga Firmware Search vendor "Nvidia" for product "Bluefield 3 Ga Firmware" | < 32.38.1002 Search vendor "Nvidia" for product "Bluefield 3 Ga Firmware" and version " < 32.38.1002" | - |
Affected
| in | Nvidia Search vendor "Nvidia" | Bluefield 3 Ga Search vendor "Nvidia" for product "Bluefield 3 Ga" | - | - |
Safe
|