CVE-2024-41645: Critical severity robot operating system (ros) vulnerability

Published Dec 6, 2024

Updated

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2amcl.

Affected Software

2 affected components

Openrobotics Robot Operating System=2-humble

Openrobotics Robot Operating System=2-iron

Event History

Dec 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-41645?

CVE-2024-41645 is considered a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2024-41645?

To mitigate CVE-2024-41645, update to the latest version of Open Robotics Robot Operating System 2 that addresses the insecure permissions.

What does CVE-2024-41645 affect?

CVE-2024-41645 affects the navigation2 component of Open Robotics Robot Operating System 2 versions humble and iron.

What type of vulnerability is CVE-2024-41645?

CVE-2024-41645 is classified as an insecure permissions vulnerability.

Can CVE-2024-41645 allow remote code execution?

Yes, CVE-2024-41645 allows an attacker to execute arbitrary code by leveraging the insecure permissions in the affected software.