Summary
ROS# before version 2.3.1 contains a code injection vulnerability that could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program.
Siemens has released a new version for ROS# and recommends to update to the latest version.
Vulnerabilities 1
-
High 8.6
A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of me…
Revision history
-
#1
Publication Date
References
-
SSA-435267: Code Injection Vulnerability in ROS# Before 2.3.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-435267.html