Description
NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types
CWE-863 Incorrect Authorization
Product status
All versions prior to 45.1020
All versions prior to 35.4554
All versions prior to 39.5050
All versions prior to 43.3608
All versions prior to 12.28.2704
All versions prior to 14.32.1908
References
nvd.nist.gov/vuln/detail/CVE-2025-23262
www.cve.org/CVERecord?id=CVE-2025-23262
nvidia.custhelp.com/app/answers/detail/a_id/5655
