CVE-2023-24012

An attacker can arbitrarily craft malicious DDS Participants or ROS 2 Nodes with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS7 certificate’s validation. This is caused by a...

CVE-2023-24012

creationtimestamp| type| source ---|---|--- 2025-01-09 14:40:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113798913135212465 2025-01-09 15:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxtvv5xw25 2025-01-09 15:38:30+00:00| seen|...

CVE-2023-24012 Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS

An attacker can arbitrarily craft malicious DDS Participants or ROS 2 Nodes with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS7 certificate’s validation. This is caused by a...