CVE-2024-41649: Critical severity robot operating system (ros) vulnerability

Published Dec 6, 2024

Updated

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executorthread.

Affected Software

2 affected components

Openrobotics Robot Operating System=2-humble

Openrobotics Robot Operating System=2-iron

Event History

Dec 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-41649?

CVE-2024-41649 has been classified as a high severity vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2024-41649?

To fix CVE-2024-41649, update to the latest version of Open Robotics Robotic Operating System that includes the security patch.

Who is affected by CVE-2024-41649?

CVE-2024-41649 affects users of Open Robotics Robotic Operating System 2 versions humble and iron.

What type of vulnerability is CVE-2024-41649?

CVE-2024-41649 is an Insecure Permissions vulnerability that allows code execution via crafted scripts.

What can an attacker achieve with CVE-2024-41649?

An attacker can execute arbitrary code on the affected system due to the insecure permissions in the affected versions.