# CVE-2025-23337

## Summary

- **CVE ID:** CVE-2025-23337
- **Severity:** MEDIUM
- **CVSS Score:** 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-1244
- **Published:** Sep 17, 2025
- **Last Modified:** Mar 13, 2026

## Description

NVIDIA HGX & DGX GB200, GB300, B300  contain a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

## Affected Products

- NVIDIA — HGX GB200, HGX GB300, HGC B300 (GB200 1.2, GB300 0.8 dev drop, B300 0.6)
- NVIDIA — DGX GB200, HGX GB300, HGC B300 (GB200 1.2, GB300 0.8 dev drop, B300 0.6)

## References

- [CNA](https://nvidia.custhelp.com/app/answers/detail/a_id/5692)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.15%
- **EPSS Percentile:** 4.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._