Search results

RVD#3345: Data Distribution Service (DDS) Chain of Trust (CoT) violation

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

package: sros2

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

vendor: eProsima

vulnerability

Status: Open.

#3345 In aliasrobotics/RVD;

· vmayoral opened on Feb 25, 2023

RVD#453: Prediction number attacks on sequence number during RTPS initialization (affects authentication and access DDS security plugins)

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

CWE-340Predictability problemsPredictability problems

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#453 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#452: DDS cryptographic plugin, MD-5 vulnerable to pre-image attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#452 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#451: DDS cryptographic plugin, AES_GCM subject to forgery, key recovery and timing attacks, and nonce replay attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#451 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#450: DDS authentication plugin weakness in prime256v1 curves might lead to data to side channel attacks

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: DDSData Distribution ServiceData Distribution Service

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#450 In aliasrobotics/RVD;

· vmayoral opened on Oct 7, 2019

RVD#446: Confidentiality loss of the context of the connection during handshake in ROS 2

components softwareVulnerabilities in purely software robot components (e.g. a the ROS navigation stack)Vulnerabilities in purely software robot components (e.g. a the ROS navigation stack)

robot component: FastRTPSeProsima's FastRTPS security flaweProsima's FastRTPS security flaw

robot component: ROS2

triageNeeds triageNeeds triage

vendor: ADLINK

vendor: eProsima

vendor: RTIReal-Time InnovationsReal-Time Innovations

vulnerability

Status: Open.

#446 In aliasrobotics/RVD;

· vmayoral opened on Oct 6, 2019