CVE-2025-23302

Published: Sep 4, 2025Modified: Jun 17, 2026Deferred

4.2

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Exploitability: 1.1 / Impact: 2.7

Source: psirt@nvidia.com (Secondary)

Description

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service.

Related CWEs

CWE-1244

Internal Asset Exposed to Unsafe Debug Access Level or State

The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-23302

Source: psirt@nvidia.com

https://nvidia.custhelp.com/app/answers/detail/a_id/5674

Source: psirt@nvidia.com

https://www.cve.org/CVERecord?id=CVE-2025-23302

Source: psirt@nvidia.com

Timeline

No history available yet.