How severe is CVE-2025-33242?

CVE-2025-33242 has a CVSS 3.x base score of 5.9, rated medium severity. It is exploitable over network with high attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2025-33242 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-33242?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-33242 have an EU (EUVD) identifier?

Yes. CVE-2025-33242 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-208971.

When was CVE-2025-33242 published?

CVE-2025-33242 was published on 2026-03-24 and last updated on 2026-06-17.

CVE-2025-33242

CVE-2025-33242 is a medium-severity vulnerability with a CVSS 3.x base score of 5.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1234.

Key facts

Severity: Medium (CVSS 3.x base score 5.9)
EPSS exploit prediction: 0% (23rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-208971
Weakness: CWE-1234
Published: 2026-03-24
Last modified: 2026-06-17

Description

NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering.

Frequently asked questions

What is CVE-2025-33242?: NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering.
How severe is CVE-2025-33242?: CVE-2025-33242 has a CVSS 3.x base score of 5.9, rated medium severity. It is exploitable over network with high attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2025-33242 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-33242?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-33242 have an EU (EUVD) identifier?: Yes. CVE-2025-33242 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-208971.
When was CVE-2025-33242 published?: CVE-2025-33242 was published on 2026-03-24 and last updated on 2026-06-17.

References

Other CWE-1234 vulnerabilities

CVE-2025-59104 — High (CVSS 7.0): With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or…

Browse all CWE-1234 vulnerabilities →