Search results

RVD#3345: Data Distribution Service (DDS) Chain of Trust (CoT) violation

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

package: sros2

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

vendor: eProsima

vulnerability

Status: Open.

#3345 In aliasrobotics/RVD;

· vmayoral opened on Feb 25, 2023

RVD#3318: XSS-like attacks for authenticated users in ABB System 800xA Information Manager

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

severity: high7.0 - 8.97.0 - 8.9

vendor: ABB

vulnerability

Status: Open.

#3318 In aliasrobotics/RVD;

· rvd-bot opened on Jul 4, 2020

RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: Ardupilot

robot component: MAVLink

robot component: PX4

severity: high7.0 - 8.97.0 - 8.9

version: 1.0

version: 2.0

vulnerability

Status: Open.

#3317 In aliasrobotics/RVD;

· vmayoral opened on Jun 30, 2020

RVD#3316: No authentication in MAVLink protocol

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: Ardupilot

robot component: MAVLink

robot component: PX4

severity: critical9.0 - 10.09.0 - 10.0

version: 1.0

vulnerability

Status: Open.

#3316 In aliasrobotics/RVD;

· vmayoral opened on Jun 30, 2020

RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: Ardupilot

robot component: MAVLink

robot component: PX4

severity: high7.0 - 8.97.0 - 8.9

version: 1.0

version: 2.0

vulnerability

Status: Open.

#3315 In aliasrobotics/RVD;

· vmayoral opened on Jun 30, 2020

RVD#926: SROS2 leaks node information, regardless of rtps_protection_kind setup

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

package: sros2

robot component: ROS2

severity: medium4.0 - 6.94.0 - 6.9

version: dashingROS 2 Dashing DiademataROS 2 Dashing Diademata

version: eloquentROS 2 Eloquent ElusorROS 2 Eloquent Elusor

vulnerability

Status: Open.

#926 In aliasrobotics/RVD;

· vmayoral opened on Dec 6, 2019

RVD#922: SROS2 leaks node information

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

exposure

package: sros2

robot component: ROS2

severity: medium4.0 - 6.94.0 - 6.9

version: dashingROS 2 Dashing DiademataROS 2 Dashing Diademata

version: eloquentROS 2 Eloquent ElusorROS 2 Eloquent Elusor

vulnerability

Status: Open.

#922 In aliasrobotics/RVD;

· vmayoral opened on Dec 5, 2019

RVD#919: roslib-socketio vulnerable to MITM attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

package: roslib-socketio

robot component: ROSROS-related vulnerabilities.ROS-related vulnerabilities.

severity: medium4.0 - 6.94.0 - 6.9

vulnerability

Status: Open.

#919 In aliasrobotics/RVD;

· vmayoral opened on Nov 28, 2019

RVD#453: Prediction number attacks on sequence number during RTPS initialization (affects authentication and access DDS security plugins)

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

CWE-340Predictability problemsPredictability problems

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#453 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#452: DDS cryptographic plugin, MD-5 vulnerable to pre-image attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#452 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#451: DDS cryptographic plugin, AES_GCM subject to forgery, key recovery and timing attacks, and nonce replay attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#451 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#450: DDS authentication plugin weakness in prime256v1 curves might lead to data to side channel attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#450 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019