CVE-2025-23356: CVE-2025-23356: kritik işlevde kimlik doğrulaması eksik

Açıklama (NVD)

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Özet bilgiler

CVSS v3.1

8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,16 (yüzdelik 5)

CWE

CWE-306

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• nvidia.custhelp.com
• CWE-306