CVE-2025-33207
MediumCVSS 6.8Summary
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
Risk Assessment
An attacker with VF access can cause device unavailability, potentially impacting the entire network infrastructure.
Recommendation
Apply firmware updates provided by NVIDIA that address this vulnerability.
Other vulnerabilities in NVIDIA ConnectX and Bluefield
See all- CVE-2025-23351Critical
A vulnerability in the command interface of NVIDIA ConnectX and BlueField allows a local user with virtual function (VF) access to cause an out-of-bounds write via crafted input. Successful exploitation may lead to arbitrary code execution on the device.
- CVE-2025-23350Critical
A vulnerability in the command interface of NVIDIA ConnectX and BlueField allows a local user with virtual function (VF) access to cause a write out of bounds via crafted input. Successful exploitation may lead to arbitrary code execution on the device.
Original NVD description (English source)
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS