ros records
7 published records for vendor ros.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 71.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-190 Integer Overflow or Wraparound2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-13566No exploit | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.ros · ros-comm · CWE-120 | Critical9.8 | — | 3.1% | Nov 22, 2019 |
40Plan | CVE-2019-13445No exploit | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.ros · ros-comm · CWE-190 | Critical9.8 | — | 2.2% | Dec 30, 2019 |
39Monitor | CVE-2020-16124No exploit | Integer overflow in ROS communications libraryros · ros-comm · CWE-190 | Critical9.8 | — | 0.9% | Oct 13, 2020 |
34Monitor | CVE-2019-13465No exploit | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.ros · ros-comm | High8.6 | — | 1.1% | Dec 30, 2019 |
31Monitor | CVE-2021-37146No exploit | An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackersros · ros-comm · CWE-835 | High7.5 | — | 2.0% | Sep 28, 2021 |
22Monitor | CVE-2019-19627No exploit | SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration.ros · sros2 · CWE-200 | Medium5.3 | — | 2.1% | Dec 6, 2019 |
21Monitor | CVE-2019-19625No exploit | SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugiros · sros2 · CWE-200 | Medium5.3 | — | 1.5% | Dec 6, 2019 |
- CVE-2019-1356640Plan
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.
CriticalCVSS 9.8No exploitEPSS 3%ros · ros-commNov 22, 2019
- CVE-2019-1344540Plan
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.
CriticalCVSS 9.8No exploitEPSS 2%ros · ros-commDec 30, 2019
- CVE-2020-1612439Monitor
Integer overflow in ROS communications library
CriticalCVSS 9.8No exploitEPSS 0%ros · ros-commOct 13, 2020
- CVE-2019-1346534Monitor
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3.
HighCVSS 8.6No exploitEPSS 1%ros · ros-commDec 30, 2019
- CVE-2021-3714631Monitor
An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers
HighCVSS 7.5No exploitEPSS 2%ros · ros-commSep 28, 2021
- CVE-2019-1962722Monitor
SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration.
MediumCVSS 5.3No exploitEPSS 2%ros · sros2Dec 6, 2019
- CVE-2019-1962521Monitor
SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugi
MediumCVSS 5.3No exploitEPSS 1%ros · sros2Dec 6, 2019