PT-2024-14069 · Ros2 · Ros2

Published 2024-01-30 · Updated 2024-05-27 · CVE-2023-51202

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ROS2 (Robot Operating System 2) versions Foxy Fitzroy

Description The issue is an OS command injection vulnerability in command processing or system call components. This allows attackers to run arbitrary commands. The ROS VERSION is 2 and ROS PYTHON VERSION is 3.

Recommendations For ROS2 (Robot Operating System 2) versions Foxy Fitzroy, consider restricting access to system call components to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable command processing components. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-51202

Affected Products

Ros2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-51202 · Security Note
• https://twitter.com/CVEnew/status/1752449718804791472 · Twitter Post
• https://t.me/cvenotify/78731 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1752476768697450738 · Twitter Post
• https://t.me/cvenotify/78764 · Telegram Post
• https://t.me/cvenotify/69316 · Telegram Post