361 matches found
CVE-2026-41551
CVE-2026-41551 Reproduction Vulnerability: Siemens ROS fileserver / fileserver2 service relative path traversal CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Affected versions: ros-sharp all name.substr10; // remove "package://" std::string package = address.substr0,...
aztarna
This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...
Quiksand-CVE-2023-24012
DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...
CVE-2012-1803
CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...
aztarna
Este repositorio ha sido archivado y ya no se mantiene. Consulte alurity para futuros avances en footprinting y fingerprinting de robots. aztarna Este repositorio contiene aztarna de Alias Robotics, una herramienta de footprinting para robots. Alias Robotics apoya a los fabricantes originales de...
ROS-20261008-73-0028
The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
ROS-20260930-73-0102
The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-42002: Improper Neutralization of Directives in Dynamically Evaluated Code
A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...
OESA-2026-4090 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...
ROS-20260923-73-0044
The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0083
The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
ROS-20260921-73-0088
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0089
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
ROS-20260921-73-0079
The vulnerability is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260921-73-0091
The vulnerability is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability can allow a remote attacker to trigger a service failure rdos...
ROS-20260921-73-0087
The vulnerability is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0078
The vulnerability is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow a perpetrator to cause service failures...
OESA-2026-3965 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...
OESA-2026-3963 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...