CVE-2025-33207: medium-severity vulnerability in NVIDIA BlueField GA
Published
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.2%
exploitation probability
0.2%top 96% of all CVEs
observed exploitation
nono source reports it
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
NVIDIA · BlueField GANVIDIA · BlueField LTS23NVIDIA · BlueField LTS24NVIDIA · ConnectX-5NVIDIA · ConnectX GANVIDIA · ConnectX LTS23NVIDIA · ConnectX LTS24Related CVEs — NVIDIA BlueField GA
In the same product, most dangerous first.