CVE-2025-23262
published 2025-09-04CVE-2025-23262: NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the…
medium6.3CVSS 3.1
AVLACLPRHUINSUCLIHAH
NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | connectx-4 | — | — |
| nvidia | connectx-4_lx | — | — |
| nvidia | connectx_ga | — | — |
| nvidia | connectx_lts22 | — | — |
| nvidia | connectx_lts23 | — | — |
| nvidia | connectx_lts24 | — | — |