HIGH🇬🇧 English

CVE-2025-23344

CVSS 7.3v3.1pub. 2025-09-09upd. 2025-09-18

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
  • Nvidia Nvdebug

    APP
    Nvidia
    < 1.7.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDoSCommand Injection
CWE
Referencje

Powiązane podatności

CVE-2025-23342HIGH8.2ten sam produkt

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged accoun...

CVE-2025-23343HIGH7.6ten sam produkt

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted componen...

CVE-2025-23252MEDIUM4.5ten sam produkt

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted componen...

CVE-2026-24207CRITICAL9.8PL ✓ten sam vendor

Authentication Bypass w NVIDIA Triton Inference Server umożliwiający RCE

CVE-2026-24178CRITICAL9.8PL ✓ten sam vendor

NVIDIA NVFlare – authorization bypass przez klucz kontrolowany przez użytkownika