Authorization Flaw in NVIDIA ConnectX Management Interface
CVE-2025-23262

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Connectx Ga
Connectx Lts22
Connectx Lts23
Connectx Lts24
Vendor
CVE Published:
4 September 2025

What is CVE-2025-23262?

The NVIDIA ConnectX management interface has a vulnerability that allows an attacker with local access to exploit incorrect authorization mechanisms. This misuse could enable unauthorized changes to configuration settings, leading to potential denial of service, escalation of privileges, and risks associated with information disclosure and data tampering. Ensuring proper access controls and monitoring can mitigate the risks presented by this vulnerability.

Affected Version(s)

ConnectX GA ConnectX-6 DE All versions prior to 45.1020

ConnectX LTS22 ConnectX-5 All versions prior to 35.4554

ConnectX LTS23 ConnectX-6 All versions prior to 39.5050

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23262
https://www.cve.org/CVERecord?id=CVE-2025-23262
https://nvidia.custhelp.com/app/answers/detail/a_id/5655

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.