NVIDIA Connectx Firmware vulnerabilities

3 CVEs affecting NVIDIA Connectx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0205, published 2023-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-0205, published 2023-04-22. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to…
CVE-2023-0203, published 2023-04-22. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to…
CVE-2023-0204, published 2023-04-22. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial…