CVE-2023-25519
Estado: ModificadaAlta (7.8)—
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-286
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-25519",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-25519",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-09-26T14:47:11.312620Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "NVIDIA",
"product": "BlueField 1",
"versions": [
{
"status": "affected",
"version": "All versions after 18.24.1000"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "BlueField 2 LTS",
"versions": [
{
"status": "affected",
"version": "All versions prior to 24.35.3006"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "BlueField 2 GA",
"versions": [
{
"status": "affected",
"version": "All versions prior to 24.38.1002"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NVIDIA",
"product": "BlueField 3 GA",
"versions": [
{
"status": "affected",
"version": "All versions prior to 32.38.1002"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:h:nvidia:bluefield_2_ga:-:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "bluefield_2_ga",
"versions": [
{
"status": "affected",
"version": "24.38.1002",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:nvidia:bluefield_3_ga:-:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "bluefield_3_ga",
"versions": [
{
"status": "affected",
"version": "32.38.1002",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:nvidia:bluefield_1:-:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "bluefield_1",
"versions": [
{
"status": "affected",
"version": "18.24.1000",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:nvidia:bluefield_2_lts:-:*:*:*:*:*:*:*"
],
"vendor": "nvidia",
"product": "bluefield_2_lts",
"versions": [
{
"status": "affected",
"version": "24.35.3006",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-09-12T02:15:10.173",
"references": [
{
"url": "https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479",
"tags": [
"Broken Link"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5479",
"tags": [
"Vendor Advisory"
],
"source": "nvd@nist.gov"
},
{
"url": "https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@nvidia.com",
"description": [
{
"lang": "en",
"value": "CWE-286"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\nNVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. \n\n"
},
{
"lang": "es",
"value": "NVIDIA ConnectX Host Firmware para BlueField Data Processing Unit contiene una vulnerabilidad en la que un anfitrión restringido puede provocar un error de administración de usuarios incorrecto. Una explotación exitosa de esta vulnerabilidad puede provocar una escalada de privilegios. "
}
],
"lastModified": "2026-06-17T05:41:24.313",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:bluefield_1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C650DAD0-9A63-45B7-BDEF-7CCB3B1256FF",
"versionStartIncluding": "18.24.1000"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:bluefield_1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "485AAB91-2835-4ABF-BBA9-647F73111358"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:bluefield_2_lts_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E192997-A07E-4D32-A164-E82F6F3302DE",
"versionEndExcluding": "24.35.3006"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:bluefield_2_lts:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F1A755B8-4FF4-4209-9E49-580159B9DFC7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:bluefield_2_ga_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53E136D7-66BB-49E1-A9E2-7E1B58A74ABA",
"versionEndExcluding": "24.38.1002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:bluefield_2_ga:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC213CA8-C172-4AB5-B66B-A5C71F470F33"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:bluefield_3_ga_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82957F72-C974-4407-AC3F-10F6678AF0F2",
"versionEndExcluding": "32.38.1002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:bluefield_3_ga:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E1A941D7-49CE-49DA-A730-71C598D11EE9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@nvidia.com"
}