{ "id": "CVE-2024-30713", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-10T02:15:10.473", "lastModified": "2024-04-17T01:15:10.050", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "An OS command injection vulnerability has been discovered in ROS2 Dashing Diademata in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the External Command Execution Modules, System Call Handlers, and Interface Scripts. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability." }, { "lang": "es", "value": "Se ha descubierto una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en ROS2 Dashing Diademata en ROS_VERSION 2 y ROS_PYTHON_VERSION 3, que permite a atacantes remotos ejecutar c\u00f3digo arbitrario, escalar privilegios y obtener informaci\u00f3n confidencial a trav\u00e9s de los m\u00f3dulos de ejecuci\u00f3n de comandos externos, los controladores de llamadas del sistema y los scripts de interfaz." } ], "metrics": {}, "references": [ { "url": "https://github.com/yashpatelphd/CVE-2024-30713", "source": "cve@mitre.org" } ] }