CVE-2025-23337

Katalog CVE

CVSS 6.7 · Medium EPSS 0,15%

Kerentanan Internal Asset Exposed to Unsafe Debug Access Level or State. Skor CVSS 3.1 6.7 (Medium) menurut nvidia.com.

Deskripsi (NVD)

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Rincian

Terbit di NVD

17 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

6.7 (Medium), sumber nvidia.com
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1244: Internal Asset Exposed to Unsafe Debug Access Level or State

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 4,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5692