PT-2023-24392 · Ros2 · Ros2

Publicado 2023-07-06 · Atualizado 2024-05-27 · CVE-2023-33567

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ROS2 Foxy Fitzroy versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3

Description An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. This could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.

Recommendations For ROS2 Foxy Fitzroy versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3, consider restricting access to ROS2 nodes to minimize the risk of exploitation. As a temporary workaround, limit the use of ROS2 nodes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Identificadores relacionados

CVE-2023-33567

Produtos afetados

Ros2

Referências · 6

• https://t.me/cvenotify/78740 · Publicação no Telegram
• https://t.me/cvenotify/78721 · Publicação no Telegram
• https://t.me/cvenotify/78756 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33567 · Nota de Segurança
• https://t.me/cvenotify/76993 · Publicação no Telegram
• https://t.me/cvenotify/53794 · Publicação no Telegram