PT-2024-23581 · Ros2+1 · Ros2+1

Published

2024-04-09

·

Updated

2024-05-27

·

CVE-2024-30703

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions ROS2 (Robot Operating System 2) versions 2 through 2, ROS PYTHON VERSION 3
Description An arbitrary file upload issue has been discovered, allowing attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via a crafted payload to the file upload mechanism of the ROS2 system. This includes the server’s functionality for handling file uploads and the associated validation processes.
Recommendations For ROS2 (Robot Operating System 2) versions 2 through 2, consider disabling the file upload mechanism until a patch is available. For ROS PYTHON VERSION 3, restrict access to the file upload functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-30703

Affected Products

Ros2
Ros Python Version