Exploit

CVE-2022-48217

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) (CWE-75)

Published: Jan 4, 2023 / Updated: 22mo ago

Gravedad: None Publicado: 04/01/2023 Last revised: 04/01/2023 Descripción: *** Pendiente de traducción *** ** DISPUTED ** The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled old_tf_topic_name and/or new_tf_topic_name parameter. NOTE: the vendor's position is "it is the responsibility of the programmer to make sure that only known and required parameters are set and unexpected parameters are not."

** DISPUTED ** The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a...

If the vulnerability is created recently it may take a few days to gather vulnerable products list and other information like cvss scores. - CVSS Scores & Vulnerability Types

** DISPUTED ** The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled old_tf_topic_name and/or new_tf_topic_name parameter. NOTE: the vendor's position is "it is the responsibility of the programmer to make sure that only known and required parameters are set and unexpected parameters are not." (CVSS:0.0) (Last Update:2023-01-04)

submitted by /u/CVEreport [link] [comments]