CVE-2025-33207

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-33207", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2025-04-15T18:51:06.122Z", "datePublished": "2026-09-29T14:12:12.949Z", "dateUpdated": "2026-09-29T15:39:43.687Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-09-29T14:12:12.949Z"}, "problemTypes": [{"descriptions": [{"cweId": "CWE-1262", "description": "CWE-1262 Improper Access Control for Register Interface", "lang": "en", "type": "CWE"}]}], "affected": [{"defaultStatus": "unaffected", "product": "BlueField GA", "platforms": ["BlueField-2"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}]}, {"defaultStatus": "unaffected", "product": "BlueField LTS23", "platforms": ["BlueField-2"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}]}, {"defaultStatus": "unaffected", "product": "BlueField LTS24", "platforms": ["BlueField-2"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}]}, {"defaultStatus": "unaffected", "product": "ConnectX GA", "platforms": ["ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}]}, {"defaultStatus": "unaffected", "product": "ConnectX LTS23", "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}]}, {"defaultStatus": "unaffected", "product": "ConnectX LTS24", "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}]}, {"defaultStatus": "unaffected", "product": "ConnectX-5", "platforms": ["ConnectX-5"], "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 16.35.8008"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service."}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "denial of service"}]}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33207"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33207"}, {"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5847"}], "metrics": [{"cvssV3_1": {"attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33207", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-29T15:11:46.490573Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-29T15:39:43.687Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33207", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-29T15:11:46.490573Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-29T15:37:10.680Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "denial of service"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "BlueField GA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}], "platforms": ["BlueField-2"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "BlueField LTS23", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}], "platforms": ["BlueField-2"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "BlueField LTS24", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}], "platforms": ["BlueField-2"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "ConnectX GA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}], "platforms": ["ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "ConnectX LTS23", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}], "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "ConnectX LTS24", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}], "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "ConnectX-5", "versions": [{"status": "affected", "version": "All versions prior to 16.35.8008"}], "platforms": ["ConnectX-5"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33207"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-33207"}, {"url": "https://github.com/NVIDIA/product-security/tree/main/2026/5847"}], "x_generator": {"engine": "NVIDIA PSIRT"}, "descriptions": [{"lang": "en", "value": "NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1262", "description": "CWE-1262 Improper Access Control for Register Interface"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2026-09-29T14:12:12.949Z"}}}, "cveMetadata": {"cveId": "CVE-2025-33207", "state": "PUBLISHED", "dateUpdated": "2026-09-29T15:39:43.687Z", "dateReserved": "2025-04-15T18:51:06.122Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2026-09-29T14:12:12.949Z", "assignerShortName": "nvidia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["BlueField-2"], "product": "BlueField GA", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}]}, {"defaultStatus": "unaffected", "platforms": ["BlueField-2"], "product": "BlueField LTS23", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}]}, {"defaultStatus": "unaffected", "platforms": ["BlueField-2"], "product": "BlueField LTS24", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}]}, {"defaultStatus": "unaffected", "platforms": ["ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "product": "ConnectX GA", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 47.1020"}]}, {"defaultStatus": "unaffected", "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "product": "ConnectX LTS23", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 39.5124"}]}, {"defaultStatus": "unaffected", "platforms": ["ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"], "product": "ConnectX LTS24", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 43.4100"}]}, {"defaultStatus": "unaffected", "platforms": ["ConnectX-5"], "product": "ConnectX-5", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All versions prior to 16.35.8008"}]}], "source": "psirt@nvidia.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service."}, {"lang": "es", "value": "NVIDIA ConnectX y Bluefield contienen una vulnerabilidad en un registro de control, donde un usuario con acceso VF podr\u00eda causar un control de acceso inadecuado para la interfaz del registro al enviar un comando malicioso al firmware. Un exploit exitoso de esta vulnerabilidad podr\u00eda conducir a una denegaci\u00f3n de servicio."}], "id": "CVE-2025-33207", "lastModified": "2026-10-14T13:10:00.187", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "psirt@nvidia.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-33207", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-29T15:11:46.490573Z", "version": "2.0.3"}}]}, "published": "2026-09-29T15:17:12.293", "references": [{"source": "psirt@nvidia.com", "url": "https://github.com/NVIDIA/product-security/tree/main/2026/5847"}, {"source": "psirt@nvidia.com", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33207"}, {"source": "psirt@nvidia.com", "url": "https://www.cve.org/CVERecord?id=CVE-2025-33207"}], "sourceIdentifier": "psirt@nvidia.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1262"}], "source": "psirt@nvidia.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["bluefield-2"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,47.1020)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "BlueField GA", "source": "cna", "vendor": "NVIDIA"}, "product": "bluefield_ga", "vendor": "nvidia"}, {"configurations": [{"platform": ["bluefield-2"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,39.5124)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "BlueField LTS23", "source": "cna", "vendor": "NVIDIA"}, "product": "bluefield_lts23", "vendor": "nvidia"}, {"configurations": [{"platform": ["bluefield-2"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,43.4100)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "BlueField LTS24", "source": "cna", "vendor": "NVIDIA"}, "product": "bluefield_lts24", "vendor": "nvidia"}, {"configurations": [{"platform": ["connectx-5"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,16.35.8008)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ConnectX-5", "source": "cna", "vendor": "NVIDIA"}, "product": "connectx-5", "vendor": "nvidia"}, {"configurations": [{"platform": ["connectx-6_de,_connectx-6_dx,_connectx-6_lx"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,47.1020)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ConnectX GA", "source": "cna", "vendor": "NVIDIA"}, "product": "connectx_ga", "vendor": "nvidia"}, {"configurations": [{"platform": ["connectx-6", "connectx-6_de", "connectx-6_dx", "connectx-6_lx"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,39.5124)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ConnectX LTS23", "source": "cna", "vendor": "NVIDIA"}, "product": "connectx_lts23", "vendor": "nvidia"}, {"configurations": [{"platform": ["connectx-6", "connectx-6_de", "connectx-6_dx", "connectx-6_lx"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,43.4100)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ConnectX LTS24", "source": "cna", "vendor": "NVIDIA"}, "product": "connectx_lts24", "vendor": "nvidia"}], "created": "2026-09-29T18:45:10.321545+00:00", "title": "Control Register Access\u2011Control Bypass in NVIDIA ConnectX and BlueField Firmware Leading to Denial of Service", "updated": "2026-09-30T02:00:15.533898+00:00", "vendors": ["nvidia", "nvidia$PRODUCT$bluefield_ga", "nvidia$PRODUCT$bluefield_lts23", "nvidia$PRODUCT$bluefield_lts24", "nvidia$PRODUCT$connectx-5", "nvidia$PRODUCT$connectx_ga", "nvidia$PRODUCT$connectx_lts23", "nvidia$PRODUCT$connectx_lts24"]}