CVE-2024-41650: Critical severity robot operating system (ros) vulnerability

Published Dec 6, 2024

Updated

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d.

Affected Software

2 affected components

Openrobotics Robot Operating System=2-humble

Openrobotics Robot Operating System=2-iron

Event History

Dec 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-41650?

CVE-2024-41650 is classified as a high severity vulnerability due to the risk of arbitrary code execution.

How do I fix CVE-2024-41650?

To fix CVE-2024-41650, update to the latest version of Open Robotics Robot Operating System 2 that addresses the insecure permissions issue.

Who is affected by CVE-2024-41650?

CVE-2024-41650 affects users of Open Robotics Robot Operating System 2 versions 2-humble and 2-iron.

What impact does CVE-2024-41650 have on systems?

CVE-2024-41650 allows an attacker to execute arbitrary code through a crafted script, potentially compromising the system's integrity.

How can I identify if my system is vulnerable to CVE-2024-41650?

Check if your system uses Open Robotics Robot Operating System 2 versions 2-humble or 2-iron and evaluate your permissions configuration.