GCVE - cpe:2.3:a:nvidia:connectx_lts23:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:connectx_lts23:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Connectx Lts23 (`71220a01-05ce-5c33-99fa-bdb8995a6025`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-23351`	vulnerable	2026-07-28 23:26:56.863312	Details available CRITICAL (9) NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device. Published: 2026-07-01T14:39:03.200Z Updated: 2026-07-01T16:03:10.537Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23351 https://www.cve.org/CVERecord?id=CVE-2025-23351 https://github.com/NVIDIA/product-security/tree/main/2026/5699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23350`	vulnerable	2026-07-28 23:26:56.862492	Details available CRITICAL (9) NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device. Published: 2026-07-01T14:36:19.755Z Updated: 2026-07-01T16:03:30.696Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23350 https://www.cve.org/CVERecord?id=CVE-2025-23350 https://github.com/NVIDIA/product-security/tree/main/2026/5699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23299`	vulnerable	2026-06-08 07:10:55.501485	Details available MEDIUM (6.7) NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code. Published: 2025-10-22T15:14:10.015Z Updated: 2025-10-22T17:54:09.412Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23299 https://www.cve.org/CVERecord?id=CVE-2025-23299 https://nvidia.custhelp.com/app/answers/detail/a_id/5684	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23262`	vulnerable	2026-06-08 07:10:55.441321	Details available MEDIUM (6.3) NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. Published: 2025-09-04T15:52:49.201Z Updated: 2025-09-04T18:57:38.048Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23262 https://www.cve.org/CVERecord?id=CVE-2025-23262 https://nvidia.custhelp.com/app/answers/detail/a_id/5655	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0105`	vulnerable	2026-06-08 06:21:58.260449	Details available HIGH (8.9) NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure. Published: 2024-11-01T05:36:06.601Z Updated: 2024-11-01T14:17:06.384Z Open on db.gcve.eu Reference links https://nvidia.custhelp.com/app/answers/detail/a_id/5562	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.