NVIDIA Bluefield and ConnectX Management Interface Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in the management interface of NVIDIA Bluefield and ConnectX products. This issue could enable a malicious actor with high privilege access to execute arbitrary code. The vulnerability is present in several different product versions, depending on the specific product and its release channel.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with high privileges on the affected system.

Remediation

Users can upgrade to version 46.1006 to address this vulnerability. For ConnectX-4 LX, version 32.1908 is available. Instructions for downloading these updates can be found on the NVIDIA Product Security page.