GPU VulnDB

Database/NVIDIA / GPU stack

HGX / DGX GB200, GB300, B300 (BMC -> HMC): BMC admin can pivot to the HMC as administrator

CVE-2025-23337NVIDIA / GPU stackcurated

Impact

BMC admin can pivot to the HMC as administrator -> code execution and privesc on the GPU baseboard controller

Who can reach it

Operator or attacker holding BMC admin on the mgmt network

What to do

Flash BMC + HMC firmware out-of-band; treat BMC admin as a tier-0 credential and rotate

References

https://github.com/NVIDIA/product-security/tree/main/2025/5692https://nvd.nist.gov/vuln/detail/CVE-2025-23337

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.