PT-2024-22907 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An issue in the permission and access control components allows attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the...

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

PT-2024-22910 · Unknown · Ros2 Humble Hawksbill

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An arbitrary file upload issue has been found, allowing attackers to execute arbitrary code, cause a denial of service, and obtain sensitive information via a crafted payload to the file upload...

CVE-2024-29448

ROS2 Humble Hawksbill (versions 2) is affected by a reported buffer overflow in the C++ components, which could allow arbitrary code execution or a denial of service through improper handling of arrays or strings. Remediation is to update to a version that includes the fix for this issue to mitig...

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

PT-2024-22903 · Unknown · Ros2 Humble Hawksbill

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill version 2 Description: An issue was discovered in the default configurations of ROS2 Humble Hawksbill, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS2 Humble Hawksbi...

CVE-2024-29450

The published details in PT-2024-22907 indicate a vulnerability affecting ROS2 Humble Hawksbill versions 2, located in the permission and access control components. The issue could allow an attacker to execute arbitrary code, cause a denial of service, escalate privileges, and obtain sensitive in...

CVE-2024-29454

CVE-2024-29454 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

CVE-2024-29452

CVE-2024-29452 relates to ROS2 Humble Hawksbill, with insecure deserialization vulnerabilities in ROS2 Humble Hawksbill versions 2 and 3. The issue enables an attacker to execute arbitrary code and obtain sensitive information via crafted input affecting the Data Serialization and Deserialization...

CVE-2024-29455

Consolidated data shows a concrete issue in ROS2 Humble Hawksbill: an arbitrary file upload vulnerability in the file upload mechanism affecting versions 2, enabling potential arbitrary code execution, denial of service, and exposure of sensitive information. The root cause and exact affected fil...

CVE-2024-29449

CVE-2024-29449 is not a publicly usable vulnerability; connected PT-2024-22905 reports a ROS2 Humble Hawksbill issue where cleartext transmission between ROS2 nodes enables potential MITM access to sensitive data. Affected: ROS2 Humble Hawksbill version 2. Root cause: unencrypted inter-node commu...

CVE-2024-29444

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-29441

CVE-2024-29441 entry is rejected/not used per the initial description.

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

PT-2024-22896 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An unauthorized node injection issue allows remote attackers to escalate privileges and inject malicious ROS2 nodes into the system. Recommendations: For ROS2 Humble Hawksbill version 2, consider...

CVE-2024-29447

ROS2 Humble Hawksbill (version 2) is identified in connected sources as having an issue where default configurations allow unauthenticated access via default credentials. This vulnerability surface is tied to the default credential behavior, enabling unauthorized access if defaults are not change...