high7.8
CVE-2023-25519
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management er…
Impact
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Bluefield 1 Firmware | from 18.24.1000 |
| Nvidia | Bluefield 2 Lts Firmware | before 24.35.3006 |
| Nvidia | Bluefield 2 Ga Firmware | before 24.38.1002 |
| Nvidia | Bluefield 3 Ga Firmware | before 32.38.1002 |