PT-2024-3637 · Ros2 · Ros2

Published 2024-03-21 · Updated 2024-05-27 · CVE-2024-29443

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ROS2 versions 2 through 3

Description: The issue is related to the handling of shell command execution in ROS2, specifically with the ROS VERSION and ROS PYTHON VERSION environment variables. This can allow a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information. The vulnerability is due to the lack of proper neutralization of special elements used in the operating system command.

Recommendations: For ROS2 versions 2 through 3, consider disabling the execution of shell commands in components that process external inputs until a patch is available. Restrict access to sensitive information and limit privileges to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2024-03959

CVE-2024-29443

Affected Products

Ros2

References · 10

• 🔥❌ https://github.com/yashpatelphd/CVE-2024-29443 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2024-03959 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-29443 · Security Note
• http://openwall.com/lists/oss-security/2024/04/23/4 · Note
• http://openwall.com/lists/oss-security/2024/04/23/2 · Note
• https://ros.org/reps/rep-0151.html · Note
• https://t.me/cvenotify/76338 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1770815263769817512 · Twitter Post
• http://openwall.com/lists/oss-security/2024/04/23/3 · Note
• http://openwall.com/lists/oss-security/2024/04/23/5 · Note