CVE-2025-33192

Medium

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful…

nvidia·CWE-690·Published 2025-11-25

CVSS

5.5

EPSS

0.00

KEV

Exploits

cve.orgen

197 chars

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service.

NVDen

197 chars

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA DGX Spark GB10 contiene una vulnerabilidad en el firmware SROOT, donde un atacante podría causar una lectura de memoria arbitraria. Un exploit exitoso de esta vulnerabilidad podría conducir a una denegación de servicio.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.7	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
3.1	Primary	NVD	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	5.7	2.5	2.7	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L