CVE-2025-33207
Received Received - Intake

Improper Access Control in NVIDIA ConnectX and Bluefield Firmware

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: NVIDIA Corporation

Description
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2025-33207
EUVD
EUVD-2025-211016

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
nvidia connectx *
nvidia bluefield *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1262 The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA ConnectX and Bluefield devices have a vulnerability in a control register. A user with Virtual Function (VF) access can send a malicious command to the firmware, causing improper access control for the register interface. This may result in a denial of service condition.

Impact Analysis

If exploited, this vulnerability could lead to a denial of service, disrupting the availability of affected NVIDIA ConnectX or Bluefield devices. Users with VF access could potentially trigger this issue.

Mitigation Strategies

Apply the latest firmware updates provided by NVIDIA for ConnectX and Bluefield devices to address the improper access control vulnerability in the control register.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-33207. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart