PT-2024-22898 · Ros2 · Ros2

Published 2024-03-25 · Updated 2024-05-27 · CVE-2024-29440

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ROS2 Humble Hawksbill versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3

Description An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. This could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.

Recommendations For ROS2 Humble Hawksbill versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3, consider restricting access to ROS2 nodes to minimize the risk of exploitation until a patch is available.

Related Identifiers

CVE-2024-29440

Affected Products

Ros2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-29440 · Security Note
• https://t.me/cvenotify/76985 · Telegram Post
• https://t.me/cvenotify/74618 · Telegram Post
• https://t.me/cvenotify/78771 · Telegram Post
• https://t.me/cvenotify/74690 · Telegram Post
• https://twitter.com/CVEnew/status/1772362502598177010 · Twitter Post