Design/Logic Flaw

An Arbitrary File Upload vulnerability in ROS2 Foxy Fitzroy ROSVERSION=2 and ROSPYTHONVERSION=3 allows attackers to run arbitrary code and cause other impacts via upload of crafted file...

Default credentials

An issue in the default configurations of ROS2 Foxy Fitzroy ROSVERSION=2 and ROSPYTHONVERSION=3 allows unauthenticated attackers to authenticate using default credentials...

CVE-2023-51199

CVE-2023-51199 entry is withdrawn (DO NOT USE candidate). Connected docs describe a real vulnerability: in ROS2 Foxy Fitzroy (ROS2 Foxy Fitzroy, ROS_VERSION=2, ROS_PYTHON_VERSION=3) there is a Buffer Overflow caused by improper handling of arrays or strings, enabling arbitrary code execution or d...

CVE-2023-51208

CVE-2023-51208 is rejected/not used; the CNA withdrew this candidate.

CVE-2023-51200

A concrete vulnerability in ROS2 Foxy Fitzroy (version 2) is described in PT-2024-14067: default configurations allow unauthenticated attackers to authenticate using default credentials. Affected software: ROS2 Foxy Fitzroy v2. Root cause: default credential usage in the installation/configuratio...

CVE-2023-51201

CVE-2023-51201 is listed as withdrawn in the Initial document, but connected sources describe a concrete issue in ROS2 Foxy Fitzroy: cleartext transmission enabling man-in-the-middle access to sensitive data. Affected software: ROS2 Foxy Fitzroy (ROS2). Vulnerable component: Transmission security...

Command injection

An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROSVERSION is 2 and ROSPYTHONVERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could...

Code injection

An unauthorized node injection vulnerability has been identified in ROS2 Foxy Fitzroy versions where ROSVERSION is 2 and ROSPYTHONVERSION is 3. This vulnerability could allow a malicious user to inject malicious ROS2 nodes into the system remotely. Once injected, these nodes could disrupt the...

CVE-2023-33566

CVE-2023-33566 is rejected; this entry does not represent an active vulnerability.

CVE-2023-33567

CVE-2023-33567 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Design/Logic Flaw

ROS2 Robot Operating System 2 Foxy Fitzroy ROSVERSION=2 and ROSPYTHONVERSION=3 are vulnerable to Denial-of-Service DoS attacks. A malicious user potentially exploited the vulnerability remotely and crashed the ROS2 nodes...

CVE-2023-33565

CVE-2023-33565 entry is rejected; not used and does not represent an active vulnerability entry.

Learn Raspberry Pi and Arduino with 9 Online Developer Training Courses

This is an exciting time for the Internet of Things. According to Deloitte research, the average U.S. household now has 25 connected devices — and new products are being launched every day. This rush of demand means that many tech companies are looking for developers with IoT knowledge. And even ...