Impact
The vulnerability in NVIDIA Isaac Launchable for Linux allows sensitive information to be transmitted in clear text, enabling an attacker to potentially execute code, elevate privileges, disclose confidential data, or tamper with data. The weakness appears to involve the lack of encryption for data that should remain confidential, which could be leveraged to compromise the system. A successful exploitation could allow attackers to gain high-level control over the affected system, jeopardizing both its confidentiality and integrity.
Affected Systems
All NVIDIA Isaac Launchable for Linux installations are affected. Specific system versions or releases are not disclosed in the available information, so all deployments should be considered vulnerable until a patch is applied.
Risk and Exploitability
The CVSS score of 7.5 indicates a high severity risk. EPSS data is not available, so the probability of exploitation cannot be quantified precisely, but the lack of encryption means attackers could feasibly intercept or manipulate data. The vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote network traffic; an attacker can intercept or send data to the vulnerable component and then perform operations that lead to code execution or privilege escalation.
OpenCVE Enrichment