ZDI-CAN-25794: ZDI-25-145: NVIDIA Riva Triton Inference Server Missing Authentication Vulnerability
Published Mar 13, 2025
·Updated
This vulnerability allows remote attackers to access protected functionality on affected installations of NVIDIA Riva. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-23242.
Affected Software
2 affected components
Nvidia Riva
Nvidia Riva Triton Inference Server
Event History
Mar 13, 2025
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-25794?
The severity of ZDI-CAN-25794 is rated at 7.3 on the CVSS scale.
2
How do I fix ZDI-CAN-25794?
To fix ZDI-CAN-25794, update your NVIDIA Riva installations to the latest version provided by NVIDIA.
3
What is the impact of ZDI-CAN-25794?
ZDI-CAN-25794 allows remote attackers to access protected functionality without authentication, potentially compromising the system.
4
Which software is affected by ZDI-CAN-25794?
ZDI-CAN-25794 affects NVIDIA Riva and NVIDIA Riva Triton Inference Server installations.
5
Is authentication required to exploit ZDI-CAN-25794?
No, authentication is not required to exploit ZDI-CAN-25794.