Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-23299 EUVD-2025-35587GHSA-rm5x-vf5q-5mp5

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege ac…

Published Oct 22, 2025 · Updated Oct 22, 2025 · Assigned by nvidia

Vendor: NVIDIA Product: BlueField GA Product: BlueField LTS22 Product: BlueField LTS23 Product: BlueField LTS24 Product: ConnectX GA Product: ConnectX LTS22 Product: ConnectX LTS23 Product: ConnectX LTS24 Product: ConnectX-4 LX

Description

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

Affected products

VendorProductAffectedFixed
NVIDIA BlueField GA All versions prior to 46.1006 —
NVIDIA BlueField LTS22 All versions prior to 35.4554 —
NVIDIA BlueField LTS23 All versions prior to 39.5050 —
NVIDIA BlueField LTS24 All versions prior to 43.3608 —
NVIDIA ConnectX GA All versions prior to 46.1006 —
NVIDIA ConnectX LTS22 All versions prior to 35.4554 —
NVIDIA ConnectX LTS23 All versions prior to 39.5050 —
NVIDIA ConnectX LTS24 All versions prior to 43.3608 —
NVIDIA ConnectX-4 LX All versions prior to 32.1908 —

Advisories 2

References