vulnerability
Ubuntu: (CVE-2024-39289): ros-kinetic-ros-comm vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Jul 17, 2025 | Jul 21, 2025 | Aug 18, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 17, 2025
Added
Jul 21, 2025
Modified
Aug 18, 2025
Description
A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval() function to process unsanitized, user-supplied parameter values via special converters for angle representations in radians. This flaw allowed attackers to craft and execute arbitrary Python code.
Solutions
ubuntu-upgrade-ros-kinetic-ros-commubuntu-upgrade-ros-melodic-ros-commubuntu-upgrade-ros-noetic-ros-comm
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.