NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BlueField GA
Vendor
NVIDIA
Product
BlueField GA
Platforms
BlueField-2
BludField-3
Default status
unaffected
BlueField GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 46.1006
affected
Unavailable
Unavailable
Unavailable
None listed
BlueField LTS22
Vendor
NVIDIA
Product
BlueField LTS22
Platforms
BlueField-2
Default status
unaffected
BlueField LTS22 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 35.4554
affected
Unavailable
Unavailable
Unavailable
None listed
BlueField LTS23
Vendor
NVIDIA
Product
BlueField LTS23
Platforms
BlueField-2
BlueField-3
Default status
unaffected
BlueField LTS23 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 39.5050
affected
Unavailable
Unavailable
Unavailable
None listed
BlueField LTS24
Vendor
NVIDIA
Product
BlueField LTS24
Platforms
BlueField-2
BlueField-3
Default status
unaffected
BlueField LTS24 · Scoped product and version facts