CVE-2023-33567

27 May 2024, 01:15

Type	Values Removed	Values Added
CVSS	v2 : unknown v3 : 8.8	v2 : unknown v3 : unknown
CWE	NVD-CWE-noinfo
Summary	(en) An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROS_VERSION is 2 and ROS_PYTHON_VERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.	(en) Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CPE	cpe:2.3:a:openrobotics:robot_operating_system:2:foxy:*:*:*:*:*:*
References	{'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/2', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/3', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/4', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/5', 'source': 'cve@mitre.org'} {'url': 'https://github.com/16yashpatel/CVE-2023-33567', 'tags': ['Third Party Advisory'], 'source': 'cve@mitre.org'}

---

01 May 2024, 19:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/5 -

---

01 May 2024, 18:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/3 -

---

01 May 2024, 17:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/2 - () http://www.openwall.com/lists/oss-security/2024/04/23/4 -

---

17 Apr 2024, 02:15

Type	Values Removed	Values Added
Summary	(en) An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROS_VERSION is 2 and ROS_PYTHON_VERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.	(en) An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROS_VERSION is 2 and ROS_PYTHON_VERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

---

06 Jul 2023, 17:33

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
References	(MISC) https://github.com/16yashpatel/CVE-2023-33567 -	(MISC) https://github.com/16yashpatel/CVE-2023-33567 - Third Party Advisory
First Time		Openrobotics robot Operating System Openrobotics
CVSS	v2 : unknown v3 : unknown	v2 : unknown v3 : 8.8
CPE		cpe:2.3:a:openrobotics:robot_operating_system:2:foxy:*:*:*:*:*:*

---

27 Jun 2023, 18:34

Type	Values Removed	Values Added
New CVE

---