GCVE - cpe:2.3:a:nvidia:bluefield_lts24:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:bluefield_lts24:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nvidia (`40c2793d-f37d-5eb8-a9a9-0c9926e4695b`)
Product	Bluefield Lts24 (`721466ec-33ac-5176-ae21-35ac82913ab6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-23351`	vulnerable	2026-07-28 23:26:56.863154	Details available CRITICAL (9) NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device. Published: 2026-07-01T14:39:03.200Z Updated: 2026-07-01T16:03:10.537Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23351 https://www.cve.org/CVERecord?id=CVE-2025-23351 https://github.com/NVIDIA/product-security/tree/main/2026/5699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23350`	vulnerable	2026-07-28 23:26:56.862149	Details available CRITICAL (9) NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device. Published: 2026-07-01T14:36:19.755Z Updated: 2026-07-01T16:03:30.696Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23350 https://www.cve.org/CVERecord?id=CVE-2025-23350 https://github.com/NVIDIA/product-security/tree/main/2026/5699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23299`	vulnerable	2026-06-08 07:10:55.501311	Details available MEDIUM (6.7) NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code. Published: 2025-10-22T15:14:10.015Z Updated: 2025-10-22T17:54:09.412Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23299 https://www.cve.org/CVERecord?id=CVE-2025-23299 https://nvidia.custhelp.com/app/answers/detail/a_id/5684	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23256`	vulnerable	2026-06-08 07:10:55.429762	Details available HIGH (8.7) NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. Published: 2025-09-04T15:50:50.490Z Updated: 2025-09-04T18:58:08.951Z Open on db.gcve.eu Reference links https://nvd.nist.gov/vuln/detail/CVE-2025-23256 https://www.cve.org/CVERecord?id=CVE-2025-23256 https://nvidia.custhelp.com/app/answers/detail/a_id/5655	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.