CVE-2025-23337

NVIDIA's HGX and DGX high-performance computing systems have a flaw in their management controller that lets someone with admin access to the system's low-level management interface (BMC) gain unauthorized admin control over the HGX Management Controller, potentially compromising the entire system.

A privilege escalation vulnerability exists in the HGX Management Controller (HMC) of NVIDIA HGX and DGX GB200/GB300/B300 platforms, allowing attackers with BMC administrative privileges to escalate to HMC administrator access. Successful exploitation can result in arbitrary code execution, DoS, privilege escalation, information disclosure, and data tampering on the affected hardware management layer.