Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:bluefield_ga:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNvidia (40c2793d-f37d-5eb8-a9a9-0c9926e4695b)
ProductBluefield Ga (0f2fba44-6add-567c-b647-58f75ebc06b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-23351 vulnerable 2026-07-28 23:26:56.862954 Details available
CRITICAL (9)
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Published: 2026-07-01T14:39:03.200Z
Updated: 2026-07-01T16:03:10.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23350 vulnerable 2026-07-28 23:26:56.850421 Details available
CRITICAL (9)
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
Published: 2026-07-01T14:36:19.755Z
Updated: 2026-07-01T16:03:30.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23299 vulnerable 2026-06-08 07:10:55.494586 Details available
MEDIUM (6.7)
NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.
Published: 2025-10-22T15:14:10.015Z
Updated: 2025-10-22T17:54:09.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23256 vulnerable 2026-06-08 07:10:55.427597 Details available
HIGH (8.7)
NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2025-09-04T15:50:50.490Z
Updated: 2025-09-04T18:58:08.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0106 vulnerable 2026-06-08 06:21:58.270171 Details available
HIGH (8.7)
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
Published: 2024-11-01T05:53:31.345Z
Updated: 2024-11-01T14:14:53.960Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0105 vulnerable 2026-06-08 06:21:58.263001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.