cve/2024/CVE-2024-30681.md
2024-05-25 21:48:12 +02:00

951 B

CVE-2024-30681

Description

** DISPUTED ** An OS command injection vulnerability has been discovered in ROS2 Iron Irwini version ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the command processing or system call components in ROS2. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

POC

Reference

No PoCs from references.

Github