PT-2024-23563 · Ros2 · Ros2
Published
2024-04-08
·
Updated
2024-05-27
·
CVE-2024-30680
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
ROS2 (Robot Operating System 2) versions ROS VERSION 2 and ROS PYTHON VERSION 3
Description
A shell injection issue was discovered, allowing attackers to execute arbitrary code, escalate privileges, and obtain sensitive information due to the way ROS2 handles shell command execution in components like command interpreters or interfaces that process external inputs.
Recommendations
For ROS2 versions ROS VERSION 2 and ROS PYTHON VERSION 3, consider restricting the execution of shell commands in components like command interpreters or interfaces that process external inputs until a patch is available.
As a temporary workaround, avoid using external inputs in ROS2 components that handle shell command execution to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ros2