CVE:CVE-2022-42268
CNNVD:CNNVD-202301-1072
NVIDIA Omniverse Kit是美国英伟达（NVIDIA）公司的一个强大的工具包。供开发人员为其生态系统构建自己的应用程序、微服务或插件。
NVIDIA Omniverse Kit 存在安全漏洞。攻击者利用该漏洞制作包含恶意Python代码的USD文件，并说服本地用户打开该文件，从而导致信息泄露、数据篡改和拒绝服务。以下产品及版本受到影响：Omniverse Audio2Face 2022.2之前版本、Omniverse Create 2022.3之前版本、NVIDIA Isaac Sim 2022.2.0之前版本、Omniverse Machinima 2022.3之前版本、Omniverse Code 2022.3.0之前版本、Omniverse View 2022.2.1之前版本。
solution:Upgrade nvidia nvidia_isaac_sim to a higher version than 2022.2.0,and avoid the version (,2022.2.0); Upgrade nvidia omniverse_audio2face to a higher version than 2022.2,and avoid the version (,2022.2); Upgrade nvidia omniverse_code to a higher version than 2022.3.0,and avoid the version (,2022.3.0); Upgrade nvidia omniverse_create to a higher version than 2022.3,and avoid the version (,2022.3); Upgrade nvidia omniverse_machinima to a higher version than 2022.3,and avoid the version (,2022.3); Upgrade nvidia omniverse_view to a higher version than 2022.2.1,and avoid the version (,2022.2.1)