Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
CVE-2025-23262: NVIDIA ConnectX Management Interface Allows Unauthorized Configuration Changes
CVE-2025-23262 · published 1 year ago
Summary
An attacker with local access to a system running NVIDIA ConnectX can modify the management interface settings, potentially causing a denial of service, escalating their privileges, exposing sensitive information, or tampering with data. This is a serious issue that requires immediate attention from administrators. To protect your system, ensure that you have the latest software updates installed and restrict local access to authorized personnel only.
Original advisory text
NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of th...
NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-863Incorrect Authorization
Timeline
Published4 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-23262 · NVD
Track software like this
Free during beta