CVE-2025-23262 describes a vulnerability in the management interface of NVIDIA ConnectX, allowing a local attacker with high privileges to modify configurations due to incorrect authorization. This flaw carries a CVSS score of 6.3 (MEDIUM), indicating potential for denial of service, privilege escalation, information disclosure, and data tampering. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| NVIDIA | ConnectX LTS22 | All versions prior to 35.4554CNA affecteddefault unaffected | |
| NVIDIA | ConnectX LTS23 | All versions prior to 39.5050CNA affecteddefault unaffected | |
| NVIDIA | ConnectX LTS24 | All versions prior to 43.3608CNA affecteddefault unaffected | |
| NVIDIA | ConnectX GA | All versions prior to 45.1020CNA affecteddefault unaffected | |
| NVIDIA | ConnectX-4 | All versions prior to 12.28.2704CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.