What’s Vulnerable › Vulnerabilities

CVE-2025-23301

• Severity: medium (CVSS 4.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-04 · updated 2026-10-18
• Weakness: CWE-1244

Description

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service.

Affected products

• NVIDIA HGX, DGX Blackwell: All versions prior to and including 1.2.0
• NVIDIA HGX, DGX Hopper: All versions prior to and including 1.7.1

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-23301
• https://nvidia.custhelp.com/app/answers/detail/a_id/5674
• https://www.cve.org/CVERecord?id=CVE-2025-23301

Get alerted when CVE-2025-23301 or the next vulnerability affects your stack