A shell injection vulnerability was discovered in ROS2 ...
Unreviewed
Published
Apr 11, 2024
to the GitHub Advisory Database
•
Updated May 11, 2024
Description
Published by the National Vulnerability Database
Apr 10, 2024
Published to the GitHub Advisory Database
Apr 11, 2024
Last updated
May 11, 2024
A shell injection vulnerability was discovered in ROS2 (Robot Operating System 2) Humble Hawksbill in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information due to the way ROS2 handles shell command execution in components like command interpreters or interfaces that process external inputs.
References