ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2025-33207

BlueField GA · improper access control

CVSS 3.1 6.8 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2025-33207

Published

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-33207

Published

BlueField GA

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "BlueField GA",
                    "platforms": [
                        "BlueField-2"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 47.1020"
                        }
                    ]
                }

BlueField LTS23

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "BlueField LTS23",
                    "platforms": [
                        "BlueField-2"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 39.5124"
                        }
                    ]
                }

BlueField LTS24

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "BlueField LTS24",
                    "platforms": [
                        "BlueField-2"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 43.4100"
                        }
                    ]
                }

ConnectX GA

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "ConnectX GA",
                    "platforms": [
                        "ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 47.1020"
                        }
                    ]
                }

ConnectX LTS23

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "ConnectX LTS23",
                    "platforms": [
                        "ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 39.5124"
                        }
                    ]
                }

ConnectX LTS24

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "ConnectX LTS24",
                    "platforms": [
                        "ConnectX-6, ConnectX-6 DE, ConnectX-6 DX, ConnectX-6 LX"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 43.4100"
                        }
                    ]
                }

ConnectX-5

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "ConnectX-5",
                    "platforms": [
                        "ConnectX-5"
                    ],
                    "vendor": "NVIDIA",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "All versions prior to 16.35.8008"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON