CVE Vulnerabilities

CVE-2023-25519

Incorrect User Management

Published: Sep 12, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulnerability may lead to escalation of privileges. 

Weakness

The product does not properly manage a user within its environment.

Affected Software

Name Vendor Start Version End Version
Bluefield_1_firmware Nvidia 18.24.1000 (including) *

References