CVE-2022-28198 — MEDIUM (6.6)

Vulnerability Description

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Nvidia	Omniverse Cache	2021.3.0
Nvidia	Omniverse Nucleus	2021.3.2
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-706

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5342Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5342Vendor Advisory

FAQ

What is CVE-2022-28198?

CVE-2022-28198 is a vulnerability with a CVSS score of 6.6 (MEDIUM). NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact con...

How severe is CVE-2022-28198?

CVE-2022-28198 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-28198?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Omniverse Cache, Nvidia Omniverse Nucleus, Microsoft Windows.