PT-2023-24392 · Ros2 · Ros2
Published
2023-07-06
·
Updated
2024-05-27
·
CVE-2023-33567
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
ROS2 Foxy Fitzroy versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3
Description
An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. This could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.
Recommendations
For ROS2 Foxy Fitzroy versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3, consider restricting access to ROS2 nodes to minimize the risk of exploitation. As a temporary workaround, limit the use of ROS2 nodes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ros2