PT-2024-23582 · Unknown · Ros2 Galactic Geochelone

Published 2024-04-09 · Updated 2024-05-27 · CVE-2024-30704

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ROS2 Galactic Geochelone versions 2

Description An insecure deserialization vulnerability has been identified, allowing attackers to execute arbitrary code and obtain sensitive information via crafted input to the Data Serialization and Deserialization Components, Inter-Process Communication Mechanisms, and Network Communication Interfaces.

Recommendations For ROS2 Galactic Geochelone version 2, consider disabling the deserialization functionality in the Data Serialization and Deserialization Components as a temporary workaround until a patch is available. Restrict access to the Inter-Process Communication Mechanisms and Network Communication Interfaces to minimize the risk of exploitation. Avoid using crafted input to these components until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-30704

Affected Products

Ros2 Galactic Geochelone

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-30704 · Security Note
• https://t.me/cvenotify/76214 · Telegram Post
• https://twitter.com/CVEnew/status/1779016093316825303 · Twitter Post