CVE-2024-30737

CVE-2024-30737 entry is rejected/not used; it does not represent an active vulnerability.

CVE-2024-30708

CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.

CVE-2024-30721

CVE-2024-30721 is rejected; this candidate withdrawn and not an active vulnerability entry.

CVE-2024-30707

PT-2024-23584 documents a vulnerability in ROS2 Dashing Diademata (versions 2) where remote attackers could escalate privileges and inject unauthorized nodes. The issue affects ROS2 Dashing Diademata version 2, and there is no information in the provided documents about a newer version that conta...

CVE-2024-30718

CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

CVE-2024-29439

CVE-2024-29439 is rejected/not used per initial description.

CVE-2024-30701

This CVE-2024-30701 entry is rejected and does not represent an active vulnerability.

CVE-2024-30676

The connected PT-2024-23559 entry identifies a Denial-of-Service flaw in ROS2 Iron Irwini, where ROS2 nodes can be remotely crashed (DoS) by a malicious user, disrupting system operation. Affected setup specifies ROS VERSION 2 with ROS PYTHON VERSION 3. Until a patch is available, the recommendat...

CVE-2024-30688

CVE-2024-30688 is rejected/not used and does not represent an active vulnerability entry.

Command injection

OS command injection vulnerability in command processing or system call componentsROS2 Robot Operating System 2 Foxy Fitzroy, with ROSVERSION=2 and ROSPYTHONVERSION=3 allows attackers to run arbitrary commands...

CVE-2023-51208

CVE-2023-51208 is rejected/not used; the CNA withdrew this candidate.

CVE-2023-51201

CVE-2023-51201 is listed as withdrawn in the Initial document, but connected sources describe a concrete issue in ROS2 Foxy Fitzroy: cleartext transmission enabling man-in-the-middle access to sensitive data. Affected software: ROS2 Foxy Fitzroy (ROS2). Vulnerable component: Transmission security...

CVE-2023-51199

CVE-2023-51199 entry is withdrawn (DO NOT USE candidate). Connected docs describe a real vulnerability: in ROS2 Foxy Fitzroy (ROS2 Foxy Fitzroy, ROS_VERSION=2, ROS_PYTHON_VERSION=3) there is a Buffer Overflow caused by improper handling of arrays or strings, enabling arbitrary code execution or d...

CVE-2023-33565

CVE-2023-33565 entry is rejected; not used and does not represent an active vulnerability entry.