CVE-2025-33179: High severity Nvidia Cumulus Linux vulnerability
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33179?
CVE-2025-33179 is considered a critical vulnerability that allows low-privileged users to escalate privileges.
How do I fix CVE-2025-33179?
To fix CVE-2025-33179, it is recommended to update NVIDIA Cumulus Linux and NVOS to the latest versions provided by NVIDIA.
Who is affected by CVE-2025-33179?
CVE-2025-33179 affects users of NVIDIA Cumulus Linux and NVOS version up to 25.02.4282 and various other versions listed in the vulnerability report.
What types of products are impacted by CVE-2025-33179?
The impacted products include NVIDIA Cumulus Linux and NVOS, which may be used in data center networking.
Can CVE-2025-33179 be exploited remotely?
Yes, CVE-2025-33179 can potentially be exploited by an attacker with low privileges remotely, leading to unauthorized command execution.