Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-92fc-jgvr-56vr

Опубликовано: 01 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.

The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.

EPSS

Процентиль: 63%
0.00451
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-668
CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.

EPSS

Процентиль: 63%
0.00451
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-668
CWE-94