← CVE Intelligence

CVE-2025-23337

NVIDIA / HGX GB200, HGX GB300, HGC B300 PUBLISHED

Description (CNA)

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected (CNA)

Vendor / productVersions
NVIDIA / HGX GB200, HGX GB300, HGC B300affected GB200 1.2, GB300 0.8 dev drop, B300 0.6
NVIDIA / DGX GB200, HGX GB300, HGC B300affected GB200 1.2, GB300 0.8 dev drop, B300 0.6

CWE

CWE-1244

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.