CVE-2025-23299

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Deferred - psirt@nvidia.com

Published

2025-10-22

Last modified

2026-10-18

Weaknesses

CWE-787

Affected products

• Bluefield Ga (Nvidia)
• Bluefield Lts22 (Nvidia)
• Bluefield Lts23 (Nvidia)
• Bluefield Lts24 (Nvidia)
• Connectx-4 Lx (Nvidia)
• Connectx Ga (Nvidia)
• Connectx Lts22 (Nvidia)
• Connectx Lts23 (Nvidia)
• Connectx Lts24 (Nvidia)

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-23299
• https://www.cve.org/CVERecord?id=CVE-2025-23299
• https://nvidia.custhelp.com/app/answers/detail/a_id/5684