PT-2019-15889 · Ros2 · Sros 2

Mikaelarguedas + 2 · Publicado 2019-12-06 · Atualizado 2019-12-13 · CVE-2019-19625

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions SROS 2 version 0.8.1

Description The issue is related to a leaky default configuration, as indicated in the policy/defaults/dds/governance.xml document, which causes SROS 2 to leak node information. This leak is due to the default configuration used by SROS 2, which provides tools for generating and distributing keys for Robot Operating System 2 and utilizes the underlying security plugins of DDS from ROS 2.

Recommendations For SROS 2 version 0.8.1, review and adjust the configuration settings in the policy/defaults/dds/governance.xml document to prevent node information leaks. Consider modifying the default configuration to enhance security and restrict unnecessary information disclosure.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-19625

Produtos afetados

Sros 2

Referências · 4

• 🔥 https://github.com/aliasrobotics/RVD/issues/922 · Exploit
• https://github.com/ros2/sros2/pull/171 · Nota
• https://osv.dev/vulnerability/CVE-2019-19625 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-19625 · Nota de Segurança