CVE-2019-15137: High severity eprosima fast dds vulnerability
Published Aug 18, 2019
·Updated
The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.
Affected Software
1 affected component
eProsima Fast-rtps<=1.9.0
Remediation
Patch Available
Event History
Aug 18, 2019
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-15137.
2
What is the severity of CVE-2019-15137?
The severity of CVE-2019-15137 is high with a CVSS score of 7.5.
3
What is the affected software for CVE-2019-15137?
The affected software for CVE-2019-15137 is eProsima Fast RTPS version up to and including 1.9.0.
4
What is the impact of CVE-2019-15137?
CVE-2019-15137 can lead to unintended connections between participants in a Data Distribution Service (DDS) network.
5
How can I fix CVE-2019-15137?
To fix CVE-2019-15137, it is recommended to upgrade to a version of eProsima Fast RTPS that is not affected by the vulnerability.