CVE-2025-33188CWE-269

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls

High · published November 25, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

🚨 An attacker could potentially tamper with hardware controls on NVIDIA DGX Spark GB10! Get ready to protect your machine! 🔥 Think of it like having a master key to a high-tech facility – if someone can manipulate the controls, they can unlock access to sensitive areas, potentially leaking information or causing chaos. ⚠️ If exploited, this vulnerability could lead to information disclosure, data tampering, or even a denial of service, leaving your system vulnerable to serious consequences. Imagine an intruder wreaking havoc in a data center, corrupting critical data and interrupting services, putting your operations at risk!

Put simply

Think of it like having a master key to a high-tech facility – if someone can manipulate the controls, they can unlock access to sensitive areas, potentially leaking information or causing chaos. ⚠️ This vulnerability in NVIDIA DGX Spark GB10 allows an attacker to manipulate hardware resources, potentially compromising system integrity. By tampering with controls, they can lead to unauthorized access and disruption of services.

What to do

If exploited, this vulnerability could lead to information disclosure, data tampering, or even a denial of service, leaving your system vulnerable to serious consequences. Imagine an intruder wreaking havoc in a data center, corrupting critical data and interrupting services, putting your operations at risk! It's crucial to patch your NVIDIA DGX Spark GB10 as soon as updates are available. Regularly review hardware access controls and ensure that only authorized personnel have access to sensitive configurations. Implement monitoring to detect any unauthorized changes. You've got this! With the right steps, you can secure your systems and maintain control. 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-11-25T17:57Z
EPSS history
Timeline
  • 25 NOV 17:57Z
    NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls
    cvelistv5