CVE-2023-25519

EUVD-2023-29471
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. 
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvidiaCNA
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
nvidiabluefield_1_firmware
18.24.1000 ≤
nvidiabluefield_2_lts_firmware
𝑥
< 24.35.3006
nvidiabluefield_2_ga_firmware
𝑥
< 24.38.1002
nvidiabluefield_3_ga_firmware
𝑥
< 32.38.1002
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479
https://nvidia.custhelp.com/app/answers/detail/a_id/5479
https://https://nvidia.custhelp.com/app/answers/detail/a_id/5479