Local Access Vulnerability in NVIDIA BlueField Management Interface
CVE-2025-23256

8.7HIGH

Key Information:

Vendor

Nvidia
Status
Bluefield Ga
Bluefield Lts22
Bluefield Lts23
Bluefield Lts24
Vendor
CVE Published:
4 September 2025

What is CVE-2025-23256?

NVIDIA BlueField has a vulnerability in its management interface that allows an attacker with local access to exploit incorrect authorization mechanisms. This exploitation can result in unauthorized configuration modifications, potentially leading to denial of service, privilege escalation, information disclosure, and data tampering. Organizations using affected versions must implement immediate remedial measures to safeguard their systems.

Affected Version(s)

BlueField GA BlueField-2 All versions prior to 45.1020

BlueField LTS22 BlueField-2 All versions prior to 35.4554

BlueField LTS23 BlueField-2 All versions prior to 39.5050

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23256
https://www.cve.org/CVERecord?id=CVE-2025-23256
https://nvidia.custhelp.com/app/answers/detail/a_id/5655

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.