Code injection

2019-08-1816:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

JSON

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service (DDS) partition.

CPENameOperatorVersion
fast-rtpsle1.9.0

CPE	Name	Operator	Version
	fast-rtps	le	1.9.0

References

arxiv.org/abs/1908.05310

github.com/eProsima/Fast-RTPS/issues/443