CVE-2023-33567: High severity robot operating system (ros) vulnerability
An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROSVERSION is 2 and ROSPYTHONVERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.
Other sources
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33567?
CVE-2023-33567 is classified as a high severity vulnerability due to the potential for unauthorized remote access to ROS2 nodes.
How do I fix CVE-2023-33567?
To fix CVE-2023-33567, upgrade to the latest version of the ROS2 Foxy Fitzroy that addresses this unauthorized access vulnerability.
What are the affected versions related to CVE-2023-33567?
CVE-2023-33567 affects ROS2 Foxy Fitzroy versions where ROS_VERSION is 2 and ROS_PYTHON_VERSION is 3.
What can happen if CVE-2023-33567 is exploited?
Exploitation of CVE-2023-33567 could allow a malicious user to gain unauthorized access to multiple ROS2 nodes, potentially compromising the system.
Is there a workaround for CVE-2023-33567?
While the best solution is to upgrade, temporary measures may include restricting network access to ROS2 nodes to trusted sources until a patch is applied.