PT-2025-38286 · Nvidia · Nvidia Dgx B300+3

Published 2025-09-16 · Updated 2025-09-18 · CVE-2025-23337

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA HGX & DGX GB200, GB300, B300 (affected versions not specified)

Description NVIDIA HGX & DGX GB200, GB300, and B300 contain an issue in the HGX Management Controller (HMC). A malicious actor with administrative access on the Baseboard Management Controller (BMC) may be able to gain administrative access to the HMC. A successful exploit could lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

Unsafe Debug Access Level

Weakness Enumeration

CWE-1244

Related Identifiers

BDU:2025-13799

CVE-2025-23337

Affected Products

Nvidia Dgx B300

Nvidia Dgx Gb200

Nvidia Dgx Gb300

Nvidia Hgx

References · 6

• https://bdu.fstec.ru/vul/2025-13799 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23337 · Security Note
• https://t.me/CVEtracker/32813 · Telegram Post
• https://t.me/cveNotify/135742 · Telegram Post
• https://twitter.com/CVEnew/status/1968561158949855385 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5692 · Note