CVE-2022-28198

State: Published
Severity: 6.6 Medium
Published: Apr 29, 2022
Updated: Aug 3, 2024
Reserved: Mar 30, 2022

Description

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	nvidia

Weaknesses

CWE-706 Use of Incorrectly-Resolved Name or Reference

Affected Products

Product	Versions
NVIDIA Omniverse NucleusNVIDIA	All versions prior to 2021.3.2Affected
NVIDIA Omniverse CacheNVIDIA	All versions prior to 2021.3.0Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5342

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.