vulnerability
Ubuntu: (CVE-2025-3753): ros-kinetic-ros-comm vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Jul 17, 2025 | Jul 25, 2025 | Aug 18, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 17, 2025
Added
Jul 25, 2025
Modified
Aug 18, 2025
Description
A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.
Solutions
ubuntu-upgrade-ros-kinetic-ros-commubuntu-upgrade-ros-melodic-ros-commubuntu-upgrade-ros-noetic-ros-comm
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.