HGX / DGX B300: Authentication bypass in the hardware management interface
CVSS 5.9CVE-2025-33242NVIDIA / GPU stackcurated
Impact
Authentication bypass in the hardware management interface
Who can reach it
Network-adjacent attacker on the mgmt path
What to do
Flash HGX/DGX management firmware out-of-band
References
Related entries
- NemoClaw: SSRFCVE-2026-24231 · NemoClawMedium
- Triton Inference Server: Use-after-free in request processingCVE-2026-24266 · Triton Inference ServerMedium
- vGPU Manager: Host impact via GPU command-buffer overflowCVE-2026-24201 · vGPU ManagerMedium
- DGX H100 BMC (IPMI): Info disclosureCVE-2023-25534 · DGX H100 BMC (IPMI)Medium
- CUDA Toolkit: Info disclosure / DoS (buffer over-read)CVE-2025-23272 · CUDA ToolkitMedium
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An invalid memory read in OSROOT firmware crashesCVE-2025-33191 · NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmwareMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.